Re: [Mailman-Users] How to turn off plain text passwords?

2011-11-02 Thread Jeffrey Walton
On Wed, Nov 2, 2011 at 7:40 AM, Larry Stone wrote: > Jeffrey Walton writes: > >> The best I can tell, Mailman 2 did the wrong thing. > > The best I can tell, your expectations for Mailman's security and the > software authors' expectations are completely diff

Re: [Mailman-Users] How to turn off plain text passwords?

2011-11-02 Thread Jeffrey Walton
On Wed, Nov 2, 2011 at 6:00 AM, Stephen J. Turnbull wrote: > Jeffrey Walton writes: > >  > The best I can tell, Mailman 2 did the wrong thing. > > Against what threats with what level of security do you have in mind? I found it interesting you brought a threat model into the di

Re: [Mailman-Users] How to turn off plain text passwords?

2011-11-02 Thread Jeffrey Walton
On Tue, Nov 1, 2011 at 9:25 PM, Stephen J. Turnbull wrote: > Jeffrey Walton writes: > >  > I wish these list managers would get a f**king clue and do things >  > securely. > > By which you mean what?  What we've learned over the last 30 years is > that when

Re: [Mailman-Users] How to turn off plain text passwords?

2011-11-01 Thread Jeffrey Walton
Hi Adam, On Tue, Nov 1, 2011 at 12:13 PM, Adam McGreggor wrote: > On Tue, Nov 01, 2011 at 07:52:08AM -0400, Jeffrey Walton wrote: >> Its the first of the month, and I'm receiving my passwords from Mailman >> servers. > > Happy Mailman Day! > > (I disable Mailma

[Mailman-Users] How to turn off plain text passwords?

2011-11-01 Thread Jeffrey Walton
Hi All, Its the first of the month, and I'm receiving my passwords from Mailman servers. I don't want my passwords stored in the plain text, and I don't want them stored with reversible encryption. How do I turn off this security hole (feature?). http://wiki.list.org/display/DOC/2+Help+for+maili