![](https://secure.gravatar.com/avatar/f732d0cebaece3486fed39be1401b0d7.jpg?s=120&d=mm&r=g)
Received an unsubscribe confirmation notice that did not originate with me.
Curious as to how this could have happened.
This Mailman 2.1.39 list is hosted by DreamHost, so I don't have access to its internal workings.
Does this mean a breach in security?
![](https://secure.gravatar.com/avatar/56f108518d7ee2544412cc80978e3182.jpg?s=120&d=mm&r=g)
On 10/25/23 12:57 PM, Michael Welch wrote:
Received an unsubscribe confirmation notice that did not originate with me.
Curious as to how this could have happened.
Someone sent an unsubscribe command for your address by email or via the web UI.
Does this mean a breach in security?
There are various ways to request unsubscription of an arbitrary address.
See for example https://your.lists.server/mailman/options/re-renches
This is why unsubscription by any means that is not authenticated with your list password requires confirmation.
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan
![](https://secure.gravatar.com/avatar/56f108518d7ee2544412cc80978e3182.jpg?s=120&d=mm&r=g)
On 10/25/23 12:57 PM, Michael Welch wrote:
Received an unsubscribe confirmation notice that did not originate with me.
Curious as to how this could have happened.
Someone sent an unsubscribe command for your address by email or via the web UI.
Does this mean a breach in security?
There are various ways to request unsubscription of an arbitrary address.
See for example https://your.lists.server/mailman/options/re-renches
This is why unsubscription by any means that is not authenticated with your list password requires confirmation.
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan
participants (2)
-
Mark Sapiro
-
Michael Welch