On Sun, 23 Nov 1997 19:02:09 -0500, John Witherspoon <[log in to unmask]> wrote: >Why is a password required to join or leave a list (like LSTOWN-L at >peach.ease.lsoft.com)? If subscription= open why is a password required? >And if subscription= open,confirm why wouldn't the confirmation mechanism >work just as well in place of a password? A password is not required if you join via email commands, (you must confirm if you are using your browser for email). Subscription for LSTOWN-L is Open,Confirm. Default options for new subscribers include REVIEW (to keep out the rash of clueless AOL newbies from a while ago). A password is required for joining via the WWW interface, to prevent spamming, since it is not possible to confirm the subscribers address in the same way as it is with email commands. If a PW can be registered first, then the address/user identity is confirmed that way. People with a legitimate interest in joining a list should have little or no problem. Spammers, spoofers, and other malicious persons will continue to be frustrated by these and other security features of LISTSERV. The personal password is a necessary feature of the WWW interface, actually making it somewhat more secure than traditional email (which can be spoofed). -- __________________________________________________________________ Ben Parker ..... L-Soft international Inc. ..... [log in to unmask]