Created attachment 197717 [details] patch Adds an option and sets it to default ON to not include plaintext passwords in mailman. See https://mail.python.org/pipermail/mailman-users/2016-April/080746.html for the source of the patch.
There's a request from users to postmaster@ to not send out the passwords with the monthly list reminder mails. Users can opt out of monthly reminder mails, but if they don't do that, users will get those mails with passwords. This OPTION and patch changes this site-wide.
Comment on attachment 197717 [details] patch It's almost there, but I have three minor items: 1. The indentation of the new Python code appears to use TABs, which is what the text description explicitly warns against doing. Please re-send with the TABs in the .py patch extended. While there, 2. please also reword the _DESC to state "Elide plaintext passwords from monthly reminders." - and 3. test if the explicit password reminder still mails the password. Thank you. (If you're on the road, I can handle 1 + 2 as well but can't handle 3 on short notice.)
I should also say that I don't have general objections and thank you for digging out the approach and offering an otherwise sound and thorough patch.
Created attachment 197739 [details] patch-v2 1+2 done. 3 will need a bit more time, I'll get back to you.
(In reply to Matthias Andree from comment #2) tested for 3 on a test installation. Monthly reminder no longer sends out the password. Individual password recovery works fine.
Comment on attachment 197739 [details] patch-v2 Thanks. Ever since I've been brought on board I have been wondering whether to make this default to on...
Committed, thanks!
A commit references this bug: Author: pi Date: Fri Nov 2 14:17:36 UTC 2018 New revision: 483810 URL: https://svnweb.freebsd.org/changeset/ports/483810 Log: mail/mailman: add OPTION to not send passwords in the monthly mails - this option is now on by default PR: 231879 Reported by: several users Approved by: mandree Obtained from: https://mail.python.org/pipermail/mailman-users/2016-April/080746.html MFH: 2018Q4 Changes: head/mail/mailman/Makefile head/mail/mailman/files/extra-patch-mailpasswds
A commit references this bug: Author: pi Date: Sun Nov 4 18:43:24 UTC 2018 New revision: 484121 URL: https://svnweb.freebsd.org/changeset/ports/484121 Log: MFH: r483810 mail/mailman: add OPTION to not send passwords in the monthly mails - this option is now on by default PR: 231879 Reported by: several users Approved by: mandree Obtained from: https://mail.python.org/pipermail/mailman-users/2016-April/080746.html Approved by: ports-secteam (riggs) Changes: _U branches/2018Q4/ branches/2018Q4/mail/mailman/Makefile branches/2018Q4/mail/mailman/files/extra-patch-mailpasswds