[Mailman-Users] subscription hiding

[jtrigg at huiekin.org]

On Mon, Apr 16, 2001 at 11:27:28PM -0400, Jesse Kornblum wrote:
> On Tue, 17 Apr 2001, KevinL wrote:
> 
> > I've had a request from someone I'm hosting a privacy-related list
> > for, to disable the '/options/<listname>/<username>' functionality, or
> > to at least make it such that people can't "probe" for addresses.  At
> > the moment, I can tell whether a given address is or is not subscribed
> > to the list by trying that url and seeing if I get a request for a
> > password, or if I get a "user does not exist".  That seems mildly
> > buggy - shouldn't it ask for a password regardless, and simply always
> > fail if the user does not exist?
> 
> This is a fantastic idea, and to be honest, I would also like to see such
> a feature implemented in v2.1. At the same time, however, this mailing
> list is probably not really the place to request a feature. (We seem to
> spend a lot of time talking about configuration issues rather than
> hardcore programming...)

Actually, the implementation I'd like to see is not having the username in
the URL at all.  Access '.../options/listname' and get prompted for username
and password.

Jim Trigg
Itinerant List Administrator
-- 
/"\                           
\ /     ASCII RIBBON CAMPAIGN 
 X       HELP CURE HTML MAIL  
/ \