Oct. 25, 2023
3:51 p.m.
On 10/25/23 12:57 PM, Michael Welch wrote:
Received an unsubscribe confirmation notice that did not originate with me.
Curious as to how this could have happened.
Someone sent an unsubscribe command for your address by email or via the web UI.
Does this mean a breach in security?
There are various ways to request unsubscription of an arbitrary address.
See for example https://your.lists.server/mailman/options/re-renches
This is why unsubscription by any means that is not authenticated with your list password requires confirmation.
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan