Sorry. I found a configuration parameter labeled "Get password reminder email for this list?" at
https://www.ietf.org/mailman/options/oauth/{my-email-address} Unbelievable option... This should not exist. Takahiko Kawasaki 2014-10-24 18:16 GMT+09:00 Antonio Sanso <asa...@adobe.com>: > hi, > > this is not Oauth@ietf only :) > > regards > > antonio > On Oct 24, 2014, at 11:11 AM, Takahiko Kawasaki <daru...@gmail.com> > wrote: > > Hello, > > As a result of subscribing to oauth@ietf.org, mailmain-ow...@ietf.org > periodically sends me emails titled "ietf.org mailing list memberships > reminder" containing my password in PLAINTEXT. It's unbelievably insecure. > > Is this happening only to me? How to stop mailmain-ow...@ietf.org from > sending such emails? It's a terrible joke that this happens for > OAUTH@ietf.org. > > They store our passwords in plaintext in their database, or at least in a > way for them to decrypt our passwords. One-way hash should be used... > > Takahiko Kawasaki > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth > > >
_______________________________________________ OAuth mailing list OAuth@ietf.org https://www.ietf.org/mailman/listinfo/oauth
