[ mailman-Bugs-646722 ] Robots needed in individual msgs
Bugs item #646722, was opened at 2002-12-01 17:29 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=100103&aid=646722&group_id=103
Category: None Group: None Status: Open Resolution: None Priority: 5 Submitted By: Joe R. Doupnik (jdoupnik) Assigned to: Nobody/Anonymous (nobody) Summary: Robots needed in individual msgs
Initial Comment: Mailman 2.1b5. Archive summary web pages have Robot shoo-away META tags, but the individual messages do not. They should be labelded the same way, for the same reasons. They are exposed to plunder in publically visible archives. Similarly, I wish we had a control to force authentication before aggregates are downloaded. I have removed the wide open "download the whole thing" givaway, but the individual (month, *.txt ) files are vulnerable. Changing this behavior is too difficult for a non-Python expert. I have also removed the web based list creation/removal cgi-bin scripts and associated web page material. The security model is set for exploitation first, protection second. Joe D.
You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=100103&aid=646722&group_id=103
participants (1)
-
noreply@sourceforge.net