[GNC-dev] Passwords are Confidential

[Mark Sapiro]

On 4/25/20 2:08 AM, flywire wrote:
> MailMan version 2.1.29
> 
> On Sat, Apr 25, 2020 at 6:08 PM Adrien Monteleone
> <adrien.monteleone at lusfiber.net <mailto:adrien.monteleone at lusfiber.net>>
> wrote:
> 
>     You can turn off the reminder in your mailman settings.
> 
>     As this is part of the mailman code, perhaps a bug report to them
>     would be in order concerning the storage issue.
> 
>     Regards,
>     Adrien
> 
>     > On Apr 24, 2020 w17d115, at 11:29 PM, flywire <flywire0 at gmail.com
>     <mailto:flywire0 at gmail.com>> wrote:
>     >
>     > My password is confidential so please don't email it to me in
>     plain text.
>     > Don't even store it, instead encrypt what I entered and store that
>     so you
>     > can verify an encrypted version of the password I enter in the future.


This is a well known, long standing issue which will not be fixed in
Mailman 2.1. See <https://bugs.launchpad.net/mailman/+bug/265179>

It is fixed in Mailman 3.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan