[Users] password security

[Ian Hinder]

On 1 Jun 2012, at 13:11, Vassilios Mewes wrote:
> 
> why is my password shown and sent unencrypted in this mail (i removed this in the copied part above)? isn't that dangerous? i have to change the password for the mailing list now, as i am using it in other places as well...

I think this is because your mailing list password is not considered very important.  These emails are designed to reduce the administrative burden from people who forget their password or want to unsubscribe.  When you first join the mailing list, you are sent an email saying:

> Normally, Mailman will remind you of your einsteintoolkit.org mailing
> list passwords once every month, although you can disable this if you
> prefer.  This reminder will also include instructions on how to
> unsubscribe or change your account options.  There is also a button on
> your options page that will email your current password to you.

You shouldn't use the same password on more than one system.  

-- 
Ian Hinder
http://numrel.aei.mpg.de/people/hinder

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.einsteintoolkit.org/pipermail/users/attachments/20120601/e7b28c4e/attachment.html