<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>I have the same issues. <br><br>--<div>Chris Lee</div><div><a href="http://chrislee.me">http://chrislee.me</a></div></div><div><br>On May 7, 2016, at 11:35 AM, Arthur <<a href="mailto:Arthur@cd-net.net">Arthur@cd-net.net</a>> wrote:<br><br></div><blockquote type="cite"><div><div dir="ltr">Hey folks,<div><br></div><div>I'd like to check with you all and see if Mailman is working correctly.</div><div><br></div><div>You can check if you can change your settings at <a href="http://lists.makerslocal.org//mailman/options/general/">http://lists.makerslocal.org//mailman/options/general/</a> Yes, I know it has two slashes after the domain name, but I'm just a regular user looking at the page.</div><div><br></div><div>I'd appreciate it if someone would double check my findings, since I can't seem to get things to work correctly.</div><div><br></div><div><ul><li>Mailman refuses to save any settings, and just bounces a user back to the password screen when clicking save, or trying to view all subscriptions.</li><ul><li>Steps to Reproduce: Log in, then click "List my other subscriptions"<br></li><li>Mitigation: ????? (I have no clue)</li></ul><li>No HTTPS, so passwords are sent in plain text over the air.</li><ul><li>Steps to Reproduce: Try to visit the https page and, recieve a certificate error.<br></li><li>Mitigation: Switch to HTTPS only, with a valid (default trusted) certificate</li></ul><li>Passwords are stored in plain text on the server.</li><ul><li>Steps to Reproduce: Request a password reminder, which just E-Mails your password to you!</li><li>Mitigation: Update to Mailman 3. Mailman 2 does not support password hashing.</li></ul></ul></div><div><div><br></div><div>While the security issues are a big deal, my problem is I can't do things like set digest mode, or change any settings for that matter. I'd appreciate it if someone else would check and see if they're having the same issues.</div><div><br></div>-- <br><div class="gmail_signature">Sincerely,<br>Arthur Moore<br>(256) 277-1001<br></div>
</div></div>
</div></blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span>general mailing list - <a href="mailto:general@lists.makerslocal.org">general@lists.makerslocal.org</a></span><br><span>A service of Makers Local 256 - <a href="https://256.makerslocal.org/">https://256.makerslocal.org/</a></span><br><span><a href="http://lists.makerslocal.org/mailman/listinfo/general">http://lists.makerslocal.org/mailman/listinfo/general</a></span></div></blockquote></body></html>