On Sun, 23 Nov 1997 19:02:09 -0500, John Witherspoon <[log in to unmask]>
wrote:

>Why is a password required to join or leave a list (like LSTOWN-L at
>peach.ease.lsoft.com)?  If subscription= open why is a password required?
>And if subscription= open,confirm why wouldn't the confirmation mechanism
>work just as well in place of a password?

A password is not required if you join via email commands, (you must
confirm if you are using your browser for email).  Subscription for
LSTOWN-L is Open,Confirm.  Default options for new subscribers include
REVIEW (to keep out the rash of clueless AOL newbies from a while ago).  A
password is required for joining via the WWW interface, to prevent
spamming, since it is not possible to confirm the subscribers address in
the same way as it is with email commands.  If a PW can be registered
first, then the address/user identity is confirmed that way.

People with a legitimate interest in joining a list should have little or
no problem.  Spammers, spoofers, and other malicious persons will continue
to be frustrated by these and other security features of LISTSERV.  The
personal password is a necessary feature of the WWW interface, actually
making it somewhat more secure than traditional email (which can be
spoofed).

--
 __________________________________________________________________
 Ben Parker ..... L-Soft international Inc. ..... [log in to unmask]