[Mailman-Developers] Hashing member passwords in config.pck

[Martin Mewes]

Hi all,

I am new to this list and just want to give my two cents as a first 
step. I mainly will give my best on i18n things in future (en->de).

Joel Ebel <jbebel at ncsu.edu> wrote :
> I can't speak to whether the work is worth the benefit, but I'm
> definitely in favor of the change.  I've always questioned the
> benefit of having recoverable passwords.  I feel like a password
> should be a one way thing.  You put it in, and you can't get it back.
>  If you forget it, you have to reset it.  I think password reminders
> are unnecessary, and I don't really like having passwords in my email
> anyway.  Perhaps a reminder of how to access your membership settings
> and reset your password would be a better option anyway.

*subscribed*

However I am not impressed by the fact that such a "major" change should 
be done to 2.1.6 but if the majority says "yes" I will follow.
Maybe it would be possible to give the installer options like (just out 
of my brain):

	./install update
			- preserves settings like in 2.1.5
			with monthly password reminders

	./install upgrade
			- rewrites everything to Barry's suggestions

	./install	- defaults to upgrade

Again however, a GUI-Option should be possible to "upgrade" later if the 
valued ListAdmin did an "update" in first instance.

I know, this will cause in double work maintaining two areas of MM and 
as I am not that much into coding, but I think this would be pretty.
Upgrading should mean to install the "Technology Preview for MM3" ;-)

bis dahin/kind regards
   
Martin Mewes
   
-- 
You are receiving this automatic notification because I am out of
the office. If I was in, chances are you wouldn't have received
anything at all.