LSTSRV-L Archives

LISTSERV Site Administrators' Forum

LSTSRV-L

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Topic: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Valdis Kletnieks <[log in to unmask]>
Mon, 25 Feb 2008 15:34:18 -0500
text/plain (13 lines)
On Mon, 25 Feb 2008 13:05:06 EST, Douglas Palmer said:
> When a user clicks on "log in" they are redirected to the https://
> URL instead of the regular one. How do I turn this off?

Well, if you *like* having all the passwords go over the wire in cleartext,
feel free to do it.  Just remember that means that basically everybody who
tries to use it from a wireless connection is now a sitting duck.

In other words - think *really* hard about what you're considering.  Doing this
basically means that *any* Listserv password is subject to capture - there's
a *reason* it's redirected to https:// and the reason is so that sensitive
things like passwords don't go over the net in cleartext.

ATOM RSS1 RSS2