[Mailman-Developers] [Greg Stark <gsstark@mit.edu>] Re: Bounceremoval parameters default values

[John W. Baxter]

On 7/1/2004 9:57, "J C Lawrence" <claw at kanga.nu> wrote:

> On Thu, 1 Jul 2004 09:46:47 -0700
> somuchfun  <somuchfun at atlantismail.com> wrote:
> 
>> J.C., I agree with you that there is never a right time. BUT, when
>> introducing a new feature (like mailman did with the VERP bounce
>> probes) it is wise to have the option to turn this feature off
>> (perhaps until 2.1.6 comes out) to give people time to adjust their
>> settings and systems.
> 
> They can of course always gain that same time and more by simply not
> upgrading.

Which is decidedly NOT encouraged by this snippet from Barry's 2.1.5
announcement:

> This version also contains a fix
> for an exploit that could allow 3rd parties to retrieve member
> passwords.  It is thus highly recommended that all existing sites
> upgrade to the latest version.

  --John