14 Jul
2010
14 Jul
'10
1:12 p.m.
2010/7/14 Kenneth Gonsalves lawgon@au-kbc.org:
any sensible 'lost your password' function will send a link to a web page where you can enter a new password. That way, the site never knows your password. Mailman does not follow this for the simple reason that mailing list passwords are trivial passwords - even if they are cracked, no damage is done.
Also, Mailman stores the membership password in plaintext; which is why Mailman asks your to use a trivial password for membership.
Anurag