GNU mailman passwords are explicitly _*NOT*_ secure!

_*DO NOT REUSE MAILING LIST PASSWORDS!*_

They ARE stored in plaintext and will be mailed back to you periodically on some setups to confirm that you want to remain subscribed.

I didn't know that. Thanks for letting me know. However, I feel it is unfriendly and dangerous for beginners. Sorry for replying to the digest mail. I've strangely received no mail from this mailing list without digests. I'll try to unsubscribe and resubscribe this mailing list. Thanks. 2018-02-28 21:00 GMT+09:00 <haskell-request@haskell.org>:

Send Haskell mailing list submissions to haskell@haskell.org

To subscribe or unsubscribe via the World Wide Web, visit http://mail.haskell.org/cgi-bin/mailman/listinfo/haskell or, via email, send a message with subject or body 'help' to haskell-request@haskell.org

You can reach the person managing the list at haskell-owner@haskell.org

When replying, please edit your Subject line so it is more specific than "Re: Contents of Haskell digest..."

Today's Topics:

1. Re: Security problem of email registration page (Thomas Jakway) 2. Re: Security problem of email registration page (Thomas Jakway)

----------------------------------------------------------------------

Message: 1 Date: Tue, 27 Feb 2018 08:23:42 -0800 From: Thomas Jakway <tjakway@nyu.edu> To: haskell@haskell.org Subject: Re: [Haskell] Security problem of email registration page Message-ID: <7b17a89d-8fb9-634e-ab9b-7839f4d893d9@nyu.edu> Content-Type: text/plain; charset="utf-8"; Format="flowed"

GNU mailman passwords are explicitly _*NOT*_ secure!

_*DO NOT REUSE MAILING LIST PASSWORDS!*_

They ARE stored in plaintext and will be mailed back to you periodically on some setups to confirm that you want to remain subscribed.

On 02/25/2018 12:44 AM, 姓名 wrote:

...

Hi there,

I become aware of the problem that https://mail.haskell.org/mailman/listinfo/haskell send a password to http://mail.haskell.org/cgi-bin/mailman/subscribe/haskell. Probably it means this page will send a password without encryption. Could you use https instead of http, or remove this duplicate page? I had used https://mail.haskell.org/cgi-bin/mailman/listinfo/haskell instead.

_______________________________________________ Haskell mailing list Haskell@haskell.org http://mail.haskell.org/cgi-bin/mailman/listinfo/haskell