Re: [OAUTH-WG] Password in plaintext in emails from mailmain-ow...@ietf.org

2014-10-24 Thread Kathleen Moriarty
Hi, This comes up every once in a while, but as long as you don't use the same password for the mailing lists as other places, there really is no threat. If someone else posted as you, just complain and it gets addressed. The only other risk I can think of would be someone removing you from t

Re: [OAUTH-WG] Password in plaintext in emails from mailmain-ow...@ietf.org

2014-10-24 Thread Takahiko Kawasaki
Sorry. I found a configuration parameter labeled "Get password reminder email for this list?" at https://www.ietf.org/mailman/options/oauth/{my-email-address} Unbelievable option... This should not exist. Takahiko Kawasaki 2014-10-24 18:16 GMT+09:00 Antonio Sanso : > hi, > > this is not Oa

Re: [OAUTH-WG] Password in plaintext in emails from mailmain-ow...@ietf.org

2014-10-24 Thread Antonio Sanso
hi, this is not Oauth@ietf only :) regards antonio On Oct 24, 2014, at 11:11 AM, Takahiko Kawasaki mailto:daru...@gmail.com>> wrote: Hello, As a result of subscribing to oauth@ietf.org, mailmain-ow...@ietf.org periodically sends me emai

[OAUTH-WG] Password in plaintext in emails from mailmain-ow...@ietf.org

2014-10-24 Thread Takahiko Kawasaki
Hello, As a result of subscribing to oauth@ietf.org, mailmain-ow...@ietf.org periodically sends me emails titled "ietf.org mailing list memberships reminder" containing my password in PLAINTEXT. It's unbelievably insecure. Is this happening only to me? How to stop mailmain-ow...@ietf.org from sen