[blag-whereto] password security policy

Abdur-Rahman Morgan arm at tearms.org
Thu Jul 23 22:08:39 UTC 2015


beloumi,

Thanks for pointing this out. The current mailing list for blag is 
located at lists.blagblagblag.org but the same issue would still remain 
true for both mail and http logins.

I'll look into Securing Mailman's web GUI by using Secure HTTP/SSL[0]
and An encrypted mailing list with Mailman, Exim and Gnupg on Debian 
GNU/Linux[1].

Thank you,

Abdur-Rahman


[0]http://wiki.list.org/DOC/4.27%20Securing%20Mailman%27s%20web%20GUI%20by%20using%20Secure%20HTTP-SSL

[1]http://www.raphinou.com/smailman/smailman.html


On 07/23/2015 11:55 AM, beloumi wrote:
> Hi,
> I subscribed some minutes ago...
> I was wondering,
> 1. why my password was stored in plaintext
> and
> 2. why it was sent via mail over the net without any encryption?
> This is a very dubious security policy...
> Are there a reason to do so?
> Regards
> Beloumi
>
> _______________________________________________
> blag-whereto mailing list
> blag-whereto at lists.aktivix.org
> https://lists.aktivix.org/mailman/listinfo/blag-whereto
>



More information about the blag-whereto mailing list