[Mailman-Developers] Doubt about security

[Barry Warsaw]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Jan 5, 2009, at 2:25 PM, Terri Oda wrote:

> This seems like it might be more of a failure in documentation/ 
> understanding than a failure in security.  All this information is  
> readily available (both about the fact that you can create from the  
> web by default, and the fact that this can be disabled) but  
> obviously people aren't finding it or don't even know to look for it.
>
> I'll try to poke around and figure out where to put it when I get  
> home from work.  I'm guessing we could use some pointers in the  
> install guides?  Or perhaps I should work up a short intro to  
> mailman security for new users who don't know the likely attack  
> points?

I think a separate section on security concerns would be really helpful.

Thanks!
- -Barry

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (Darwin)

iEYEARECAAYFAkliYRoACgkQ2YZpQepbvXFfqQCgpzjGrhBDEfvcdEH/BMnGgsLq
UzsAnAnsOAqJUkIzcDBL0DRYS0qtLGgO
=kAeJ
-----END PGP SIGNATURE-----