Comment 7 for bug 265179

Revision history for this message
Barry Warsaw (barry) wrote : Re: [Bug 265179] Re: Security hole: passwords mailed in clear

On Aug 01, 2012, at 12:26 PM, W. Prins wrote:

>Ran into this today, believe it or not, on the Python mailing list. I'm
>surprised that bad security is justified by referring to bad policy
>documentation... as if the fact that a bad idea written as policy on a
>subscription page makes it suddenly a good idea or beyond criticism.
>IMHO Users should not be told to "follow instructions" to compensate for
>lax handling of password data, no matter how trivial it may seem.

You can turn off password reminders in your own preferences. Password
reminders are removed in Mailman 3 and passwords are not stored in the clear
in Mailman 3.