On 10/25/23 12:57 PM, Michael Welch wrote:
Received an unsubscribe confirmation notice that did not originate with me.

Curious as to how this could have happened.


Someone sent an unsubscribe command for your address by email or via the web UI.


Does this mean a breach in security?


There are various ways to request unsubscription of an arbitrary address.

See for example https://your.lists.server/mailman/options/re-renches

This is why unsubscription by any means that is not authenticated with your list password requires confirmation.

--
Mark Sapiro <m...@msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

------------------------------------------------------
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/
Member address: arch...@jab.org

Reply via email to