It looks like I forgot to Reply All. Repeating my message:

On 21 September 2017 at 13:21, Michael Aquilina
<[email protected]> wrote:
> I would disagree with you. Not everyone uses a password manager
> (unfurtunately) If its not obvious that your password is going to be
> stored in plain text then its going to be a nasty surprise. Or worse,
> you will never actually find out that your password has been stored in
> plain text somewhere.

The sign-up page says this above the password box:

> You may enter a privacy password below. This provides only mild security, but 
> should prevent others from messing with your subscription. **Do not use a 
> valuable password** as it will occasionally be emailed back to you in 
> cleartext.
>
> If you choose not to enter a password, one will be automatically generated 
> for you, and it will be sent to you once you've confirmed your subscription. 
> You can always request a mail-back of your password when you edit your 
> personal options.

My standard practice for mailman is to let the password be random (not
stored in pass) and disable the monthly reminder “feature”.

-- 
Chris Warrick <https://chriswarrick.com/>
PGP: 5EAAEA16
_______________________________________________
Password-Store mailing list
[email protected]
https://lists.zx2c4.com/mailman/listinfo/password-store

Reply via email to