Vidiot wrote:
> My point still stands, one doesn't need to use a password to make
> subscribing/unsubscribing secure.
Password isn't *necessarily* needed for un/subscribing, you're correct.
However, in the case of RedHat, as well as many other companies and individuals
running the GNU Mailman software, password DO come in handy when you want to make
things like archives private to list members only. Or if you don't want people
not subscribed to look up the lists membership and harvest emails. By requiring
a password, they are now forced to subscribe before they can get to anything.
Granted, RedHat's archives are open to the public, but there are other
sections of it that are not (they're restricted to members only, and some parts
to the list admin only). GNU Mailman has one central password (per user) for all
of these functions, and you can't disable it for one thing and have it for
another.
And while you have a point, passwords aren't needed to un/subscribe, they are
needed to change your subscription methods. Without a password, anyone can log
onto the page, type in your email address and UNsubscribe you (there is no
confirmation sent), change your subscription, or do other things that you won't
even be aware off. GNU Mailman just went one step further and used that same
password to un/subscribe you.
GNU Mailman is available at ftp://ftp.gnu.org/pub/gnu/mailman/ - download it,
and read the source if you care.
AMK4
--
W |
| I haven't lost my mind; it's backed up on tape somewhere.
|____________________________________________________________________
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Ashley M. Kirchner <mailto:[EMAIL PROTECTED]> . 303.442.6410 x130
SysAdmin / Websmith . 800.441.3873 x130
Photo Craft Laboratories, Inc. . eFax 248.671.0909
http://www.pcraft.com . 3550 Arapahoe Ave #6
.................. . . . . Boulder, CO 80303, USA
_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list
