Sure, but that's why other packages confirm unsubs as well as subs. If I can completely take over a users' account, Mailman will tell me the password. Again, there is no valid reason for requiring a password to unsub via email other than to eliminate confirmation emails. At the end of the day more of my users would prefer confirmation emails over having to go to some website to request a password be sent in an email so that they can send another email to unsubscribe.
-Jim P. > -----Original Message----- > From: Kyle Rhorer > Sent: Friday, September 20, 2002 1:33 AM > To: Jim Popovitch > Cc: [EMAIL PROTECTED] > Subject: Re: [Mailman-Users] Subscription options help > > > On Thursday 19 September 2002 22:38, Jim Popovitch wrote: > > <rant> > > Mailman should allow unsubscriptions via confirmed email w/o > > requiring a password, there is no valid reason to require the > > password when unsubscribing via email. > > </rant> > > Do you know how easy it is to spoof email? That's the valid reason > Mailman requires a password even when unsubscribing via email. > > ------------------------------------------------------ Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
