On Mon, Jan 05, 2009 at 09:34:47AM -0500, Dan Mahoney, System Admin wrote:
> I see this as a non-issue, personally, but I do think it looks bad, and 

Likewise.

> think that screen should in a perfect world only be shown ONLY if there is 
> a "list creator" password with no other privileges (but then, if that was 
> the behavior, it would leak that fact).

If anyone were that'd bothered, they'd presumably use the
authentication/protection methods of their webserver on /create : or,
indeed, not bother maaking the Alias (or equiv) at all.

-- 
An Englishman thinks that 100 miles is a long way;
an American thinks that 100 years is a long time.
_______________________________________________
Mailman-Developers mailing list
Mailman-Developers@python.org
http://mail.python.org/mailman/listinfo/mailman-developers
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: 
http://www.mail-archive.com/mailman-developers%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-developers/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9

Reply via email to