Re: [Bf-committers] Plaintext password in membership reminder

2018-06-08 Thread Dan McGrath
Hi Torsten, I am aware of your concern. Unfortunately, I did not write Mailman :( AFAIK, there are only 3rd party addon's to do such things, but I believe that the situation comes down to it being a known issue, with the recommendation being for you to not use important passwords for the service,

Re: [Bf-committers] Plaintext password in membership reminder

2018-06-07 Thread Torsten Mohr
Hello, Even if I change the setting and don't get reminders then it seems you still store the password in cleartext. This is looks like quite a big security problem. Also, storing passwords in cleartext is not really state of the art any more. Are there plans to change this? Best regards

Re: [Bf-committers] Plaintext password in membership reminder

2018-06-04 Thread Dan McGrath
Hi, This will simply stop you from receiving the plain text password. As I have mentioned several times in private mails, the version of Mailman that we use is not capable of hashing passwords (at least out of the box, iirc). The upcoming version 3 was an overhaul which should address this

Re: [Bf-committers] Plaintext password in membership reminder

2018-06-03 Thread Vicente Carro
If he does that, will the plain text password be removed from the server or simply he will stop receiving them in the emails? On 2 June 2018 at 15:59, Dan McGrath wrote: > Hi Thomas, > > To disable this, as it is a per user configuration choice, log into your > account and turn off password

Re: [Bf-committers] Plaintext password in membership reminder

2018-06-02 Thread Dan McGrath
Hi Thomas, To disable this, as it is a per user configuration choice, log into your account and turn off password reminders. You can set this globally for all lists, or on a per list basis. Dan ___ Bf-committers mailing list Bf-committers@blender.org