> in indymedia (http://indymedia.org) and sindominio
> (http://sindomino.net) we saw the necessity to protect the admin part
> of mailman (above all the password transmission) with a ssl
> connection. 

We protect all of mailman with an Apache rewrite rule. This is probably
overkill for public archives, but since all of our archives are private:

    RewriteCond %{HTTPS} !=on
    RewriteRule ^/mailman/(.*) https://%{SERVER_NAME}/mailman/$1 [R,L]

Simple, and survives upgrades :-)

-- 
Harald Koch <[EMAIL PROTECTED]>    http://blog.cfrq.net/chk/

When you have accidentally boarded the wrong train, there is no point
running down the corridor in the opposite direction.

_______________________________________________
Mailman-Developers mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-developers

Reply via email to