LSTSRV-L Archives

LISTSERV Site Administrators' Forum

LSTSRV-L

Options: Use Monospaced Font
Show Text Part by Default
Condense Mail Headers

Topic: [<< First] [< Prev] [Next >] [Last >>]

Parts/Attachments: text/plain (13 lines)
Print Reply
Mime-Version:
1.0
Sender:
LISTSERV give-and-take forum <[log in to unmask]>
Subject:
From:
Valdis Kletnieks <[log in to unmask]>
Date:
Mon, 25 Feb 2008 15:34:18 -0500
In-Reply-To:
Your message of "Mon, 25 Feb 2008 13:05:06 EST." <[log in to unmask]>
Content-Type:
text/plain; charset=us-ascii
Reply-To:
LISTSERV give-and-take forum <[log in to unmask]>
On Mon, 25 Feb 2008 13:05:06 EST, Douglas Palmer said:
> When a user clicks on "log in" they are redirected to the https://
> URL instead of the regular one. How do I turn this off?

Well, if you *like* having all the passwords go over the wire in cleartext,
feel free to do it.  Just remember that means that basically everybody who
tries to use it from a wireless connection is now a sitting duck.

In other words - think *really* hard about what you're considering.  Doing this
basically means that *any* Listserv password is subject to capture - there's
a *reason* it's redirected to https:// and the reason is so that sensitive
things like passwords don't go over the net in cleartext.

ATOM RSS1 RSS2