[Mailman-Users] Password in clear text

2014-07-02 Thread Henrik Rasmussen
I know this has been asked before, but I haven't found anything about whether or not this will be a future change or how to work around it. The passwords in Mailman, are stored unencrypted. The web connection can be encrypted by SSL to avoid man in the middle, but passwords are sent in clear

Re: [Mailman-Users] Question about rejection messages.

2014-07-02 Thread Robert Heller
At Tue, 01 Jul 2014 20:34:15 -0700 Mark Sapiro m...@msapiro.net wrote: On 07/01/2014 07:12 PM, Stephen J. Turnbull wrote: Mark Sapiro writes: At 05:00 local time this morning my Mailman installation sent password reminders to 65 comcast.net addresses. Of these, exactly 1 bounced

Re: [Mailman-Users] Question about rejection messages.

2014-07-02 Thread Stephen J. Turnbull
Robert Heller writes: All three of the comcast bounces were @cable.comcast.com addresses. Other comcast address (all @comcast.net) went through fine. The @cable.comcast.com were working for sometime. Well, comcast.net is participating in DMARC, while neither comcast.com not

Re: [Mailman-Users] Password in clear text

2014-07-02 Thread Mark Sapiro
On 07/02/2014 03:58 AM, Henrik Rasmussen wrote: I know this has been asked before, but I haven't found anything about whether or not this will be a future change or how to work around it. Mailman 3 does not store unencrypted passwords. There are no plans for changing the way passwords are

Re: [Mailman-Users] Password in clear text

2014-07-02 Thread Stephen J. Turnbull
Mark Sapiro writes: On 07/02/2014 03:58 AM, Henrik Rasmussen wrote: I know this has been asked before, but I haven't found anything about whether or not this will be a future change or how to work around it. You can always remove cron/mailpasswds from Mailman's crontab to avoid