Subject: [Cfrg] Mailman version

From: Todd Blose <[email-masked]>
Date: Fri, 7 Nov 2014 16:40:51 -0800

Why is the IETF using < Mailman 3 for its mailing lists?

Here's a refresher from 2002 why it has bad security "features"
http://www.jwz.org/doc/mailman.html

And a Google query:
https://www.google.com/webhp?sourceid=chrome-instant&ion=1&espv=2&ie=UTF-8#q=%22you%20must%20know%20your%20password%20to%20change%20your%20options%20(including%20changing%20the%20password%2c%20itself)%20or%20to%20unsubscribe%20without%20confirmation.%22

Just curious :)

Thanks,
Todd

---

From: Todd Blose <[email-masked]>
Date: Fri, 7 Nov 2014 16:41:25 -0800

Woops. Apologies for sending that twice.