GNU mailman passwords are explicitly NOT secure!

DO NOT REUSE MAILING LIST PASSWORDS!

They ARE stored in plaintext and will be mailed back to you periodically on some setups to confirm that you want to remain subscribed.

On 02/25/2018 12:44 AM, 姓名 wrote:

Hi there,

I become aware of the problem that https://mail.haskell.org/mailman/listinfo/haskell send a password to http://mail.haskell.org/cgi-bin/mailman/subscribe/haskell. Probably it means this page will send a password without encryption. Could you use https instead of http, or remove this duplicate page? I had used https://mail.haskell.org/cgi-bin/mailman/listinfo/haskell instead.
_______________________________________________
Haskell mailing list
Haskell@haskell.org
http://mail.haskell.org/cgi-bin/mailman/listinfo/haskell