[Mailman-Developers] password a MUST?!

[Chuq Von Rospach]

At 12:07 AM -0400 6/15/2000, Mentor Cana wrote:
>Hello,
>
>Isn't it more user friendly and a nice feature to have the password as
>optional when users try to subscribe to a list?

You need some way to authenticate users on the web site. Otherwise, 
anyone with your emailaddress can raise havoc on you.

But that doesn't mean the password needs to be set immediately, 
Simple leave it undefined until a user needs it, and then 
auto-generate it and mail it to them on request. That way, until the 
user needs it, they aren't confused by it....

But if you're going to do your admin via web, you need some sort of 
server-generated dongle to validate the user has access to the email 
address.

Unfortunately, you can't trust the universe.

-- 
Chuq Von Rospach - Plaidworks Consulting (mailto:chuqui@plaidworks.com)
Apple Mail List Gnome (mailto:chuq@apple.com)

And they sit at the bar and put bread in my jar
and say 'Man, what are you doing here?'"