hello all, i received the following email today from mailman-owner@einste intoolkit.org:
This is a reminder, sent out once a month, about your einsteintoolkit.org mailing list memberships. It includes your subscription info and how to use it to change it or unsubscribe from a list.
You can visit the URLs to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.
In addition to the URL interfaces, you can also use email to make such changes. For more info, send a message to the '-request' address of the list (for example, mailman-request@einsteintoolkit.org) containing just the word 'help' in the message body, and an email message will be sent to you with instructions.
If you have questions, problems, comments, etc, send them to mailman-owner@einsteintoolkit.org. Thanks!
Passwords for vassilios.mewes@uv.es:
List Password // URL ---- --------
why is my password shown and sent unencrypted in this mail (i removed this in the copied part above)? isn't that dangerous? i have to change the password for the mailing list now, as i am using it in other places as well...
best wishes,
Vassili
On 1 Jun 2012, at 13:11, Vassilios Mewes wrote:
why is my password shown and sent unencrypted in this mail (i removed this in the copied part above)? isn't that dangerous? i have to change the password for the mailing list now, as i am using it in other places as well...
I think this is because your mailing list password is not considered very important. These emails are designed to reduce the administrative burden from people who forget their password or want to unsubscribe. When you first join the mailing list, you are sent an email saying:
Normally, Mailman will remind you of your einsteintoolkit.org mailing list passwords once every month, although you can disable this if you prefer. This reminder will also include instructions on how to unsubscribe or change your account options. There is also a button on your options page that will email your current password to you.
You shouldn't use the same password on more than one system.
On Friday 01 June 2012 13:11:32 Vassilios Mewes wrote:
hello all, i received the following email today from mailman-owner@einste intoolkit.org:
This is a reminder, sent out once a month, about your einsteintoolkit.org mailing list memberships. It includes your subscription info and how to use it to change it or unsubscribe from a list.
You can visit the URLs to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.
In addition to the URL interfaces, you can also use email to make such changes. For more info, send a message to the '-request' address of the list (for example, mailman-request@einsteintoolkit.org) containing just the word 'help' in the message body, and an email message will be sent to you with instructions.
If you have questions, problems, comments, etc, send them to mailman-owner@einsteintoolkit.org. Thanks!
Passwords for vassilios.mewes@uv.es:
List Password // URL
why is my password shown and sent unencrypted in this mail
I agree this is dangerous, Emails (if unencrypted), can be read easily on any relay host in between.
Why does this happen?
Best wishes
Alexander
Hi,
On Fri, Jun 01, 2012 at 01:11:32PM +0200, Vassilios Mewes wrote:
why is my password shown and sent unencrypted in this mail (i removed this in the copied part above)? isn't that dangerous?
Passwords for email lists are not considered to be secure. They are typically used within emails or unsecured web pages (e.g. to change settings or to browse private archives). Hence, almost all mailman installations send monthly reminders with the list password mentioned.
i have to change the password for the mailing list now, as i am using it in other places as well...
Doing that is something mailman actually warns you about when you choose set the password: "You may enter a privacy password below. This provides only mild security, but should prevent others from messing with your subscription. Do not use a valuable password as it will occasionally be emailed back to you in cleartext."
I recommend to not enter a password there in which case mailman will generate some random password for you (and send it by cleartext email, either monthly or on request.
Frank
users@lists.einsteintoolkit.org
-
Alexander Beck-Ratzka -
Frank Loeffler -
Ian Hinder -
Vassilios Mewes