Hi Peter - In general, as this post suggests (pardon the liberties...!),
Mailman isn't super-secure. For example, all it takes to impersonate you
as a member posting is to know your email address. So encrypted
passwords are the least concern, and I wouldn't use a very important
password.

Regarding spaces in passwords -- I just noticed this today, and had to
validate my password input against spaces.

Mailman is great for simple, fast email list exchange and has its place.
I've had no cause for complaints after using it for about 4 years now.

Regards,
Tom Wolfe
informalex.org
acmg.ca/mcr
and soon... trailex.org

On Fri, 2006-05-26 at 17:23 -0400, Peter C.S. Adams wrote:
> Thus spake Tom Wolfe <[EMAIL PROTECTED]>, circa 5/26/2006 1:05 PM:
> > 2. You can use email commands to retrieve the list of members by doing
> > To: [EMAIL PROTECTED]
> > From: (a subscriber's email address, pref. admin)
> > Subject: who password [address=<address>]
> 
> This doesn't appear to work if there is a space in the password.
> 
> By the way, does anyone else feel uneasy sending their password in cleartext
> through email (especially in the subject line)?
> 
> Perhaps in a future version of mailman, commands could be authenticated in
> the same way as subscription requests -- with a return email asking for
> confirmation.
> 
>     peter
> 
> 
> ------------------------------------------------------
> Mailman-Users mailing list
> Mailman-Users@python.org
> http://mail.python.org/mailman/listinfo/mailman-users
> Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
> Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
> Unsubscribe: 
> http://mail.python.org/mailman/options/mailman-users/twolfe%40sawback.com
> 
> Security Policy: 
> http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp

------------------------------------------------------
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&amp;file=faq01.027.htp

Reply via email to