List Moderator Login should check for username

[arky]

List Moderator logins currently prompt for list moderator password only. It would be good idea if prompt for username/password login information to check if the user actually has permission to login.

The problem is when anyone who knows the list moderator password can access and moderate the list.

 Mailman: 2.1.9

[Mark Sapiro (msapiro)]

> The problem is when anyone who knows the list moderator password can access and moderate the list.

That is the way it is designed to work. See, e.g., <http://wiki.list.org/x/5YA9>.

Further, the owner addresses are listed in the footer of the admin and moderator login pages, so they aren't in any way secret.

I have marked this as "wishlist" for possible inclusion in a future release.

[Andre Klapper (a9016009)]

In practice, every time the list of mailing list admins changes, the password needs to be reset for everybody.