[Mailman-Developers] Hashing member passwords in config.pck

Chuq Von Rospach chuqui at plaidworks.com
Thu Feb 10 18:50:24 CET 2005


On Feb 10, 2005, at 9:32 AM, John Dennis wrote:

> My suggestion would be:
>
> 1) As soon as possible post MM 2.1.6 with the security patch.
>
> 2) Quickly follow up with MM 2.1.7 with the member passwords hashed. At
>

> Then in the MM 3.0 time frame the entire mailman security framework
> should be revisited, there are many security issues that should be
> addressed.

+1




More information about the Mailman-Developers mailing list