[Users] password security

[Alexander Beck-Ratzka]

On Friday 01 June 2012 13:11:32 Vassilios Mewes wrote:
> hello all, i received the following email today from mailman-owner at einste
> intoolkit.org:
> 
> This is a reminder, sent out once a month, about your
> einsteintoolkit.org mailing list memberships.  It includes your
> subscription info and how to use it to change it or unsubscribe from a
> list.
> 
> You can visit the URLs to change your membership status or
> configuration, including unsubscribing, setting digest-style delivery
> or disabling delivery altogether (e.g., for a vacation), and so on.
> 
> In addition to the URL interfaces, you can also use email to make such
> changes.  For more info, send a message to the '-request' address of
> the list (for example, mailman-request at einsteintoolkit.org) containing
> just the word 'help' in the message body, and an email message will be
> sent to you with instructions.
> 
> If you have questions, problems, comments, etc, send them to
> mailman-owner at einsteintoolkit.org.  Thanks!
> 
> Passwords for vassilios.mewes at uv.es:
> 
> List                                     Password // URL
> ----                                     --------
> 
> 
> 
> 
> why is my password shown and sent unencrypted in this mail

I agree this is dangerous, Emails (if unencrypted), can be read easily on any 
relay host in between.

Why does this happen?

Best wishes

Alexander