[Mailman-Developers] Disabling the use of Password totally?

GONG Wei wgong@smu.edu.sg
Sun, 25 Aug 2002 23:38:11 +0800


Hi all,

I recently demostrated the use of Mailman to my boss, who is quite
impressed, except the fact that he really doesn't like the use of password
in Mailman.  I myself had been a mailman user for quite some time and I had
no problem with the existence of password.  But after he mentioned that I
think to certain extent his reasoning is also valid.  Instead of using
password why not simply ask the user to confirm (by replying) if they want
to, say, modify the digest option.  From security point of view this really
has no difference since anyway people can always hit the "send password to
me" button.

While browsing the list archive message I noticed that the problem discussed
in thread:
http://mail.python.org/pipermail-21/mailman-developers/2002-August/012757.ht
ml
http://mail.python.org/pipermail-21/mailman-developers/2002-August/012761.ht
ml
http://mail.python.org/pipermail-21/mailman-developers/2002-August/012762.ht
ml
http://mail.python.org/pipermail-21/mailman-developers/2002-August/012771.ht
ml would not exist at all, if such "password based control" could be turnt
off by the site administrator, if desirable.

As usual, your comments are always more than welcome.  Thank you!

Regards
==========
Gong Wei (+65 68220120, wgong@smu.edu.sg)
Office of CIT, SMU
Thawte Email Cert thumbprint: c5 84 23 68 da 18 6c 4f 57 db 42 49 55 70 74
31 4c 40 a1 52
GnuPG fingerprint: 9514 C3E9 EEF9 2117 CAA3 C438 5F27 797A D10E CB08 
Visit http://www.keyserver.net/en/ for public key