[Mailman-Users] Newbie questions

[Peter CS Adams aka Tom]

Hi Peter - In general, as this post suggests (pardon the liberties...!),
Mailman isn't super-secure. For example, all it takes to impersonate you
as a member posting is to know your email address. So encrypted
passwords are the least concern, and I wouldn't use a very important
password.

Regarding spaces in passwords -- I just noticed this today, and had to
validate my password input against spaces.

Mailman is great for simple, fast email list exchange and has its place.
I've had no cause for complaints after using it for about 4 years now.

Regards,
Tom Wolfe
informalex.org
acmg.ca/mcr
and soon... trailex.org

On Fri, 2006-05-26 at 17:23 -0400, Peter C.S. Adams wrote:
> Thus spake Tom Wolfe <twolfe at sawback.com>, circa 5/26/2006 1:05 PM:
> > 2. You can use email commands to retrieve the list of members by doing
> > To: listname-request at domain.com
> > From: (a subscriber's email address, pref. admin)
> > Subject: who password [address=<address>]
> 
> This doesn't appear to work if there is a space in the password.
> 
> By the way, does anyone else feel uneasy sending their password in cleartext
> through email (especially in the subject line)?
> 
> Perhaps in a future version of mailman, commands could be authenticated in
> the same way as subscription requests -- with a return email asking for
> confirmation.
> 
>     peter
> 
> 
> ------------------------------------------------------
> Mailman-Users mailing list
> Mailman-Users at python.org
> http://mail.python.org/mailman/listinfo/mailman-users
> Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
> Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
> Unsubscribe: http://mail.python.org/mailman/options/mailman-users/twolfe%40sawback.com
> 
> Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp