<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hi Michael,<br>
</p>
<div class="moz-cite-prefix">Le 2021-04-10 à 20:12, Michael
Schultheiss a écrit :<br>
</div>
<blockquote type="cite" cite="mid:20210411001242.GA1296@amellus.com">
<pre class="moz-quote-pre" wrap="">Philippe Cloutier wrote:
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">SPI's website allows (visibly) to consult the archives of the spi-private
mailing list, via <a class="moz-txt-link-freetext" href="http://lists.spi-inc.org/private/spi-private/">http://lists.spi-inc.org/private/spi-private/</a>
Unfortunately, this requires authentication using an unspecified password. I
for one am currently unable to access the archives as a result (I do not
remember ever managing to access).
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
All mailman lists have user level passwords. If you don't recall your
spi-private password, you can enter your email in the final box on
<a class="moz-txt-link-freetext" href="http://lists.spi-inc.org/listinfo/spi-private">http://lists.spi-inc.org/listinfo/spi-private</a> and click [Unscubscibe or
edit options] and get a password reminder from the next page.</pre>
</blockquote>
<p><br>
</p>
<p>Thank you, I managed to access the archives thanks to the
"password reminder". I also understood what happened. I had never
set a password for spi-private. The password was determined by
Mailman, and indicated to me in the mail which I received on
subscription.</p>
<p>That subscription mail (and therefore my password) has been in my
mailbox for 4 years. In my opinion, this might constitutes a
security issue; anyone who would gain access to the mailbox of an
spi-private subscriber who did not delete their subscription
message would gain access to the full history of spi-private.</p>
<p><br>
</p>
<p>That being said, to go back to the original problem, the
paragraph "(<i>The subscribers list is only available to the list
administrator.</i>)" which starts the Spi-private Subscribers
section in <a class="moz-txt-link-freetext" href="http://lists.spi-inc.org/listinfo/spi-private">http://lists.spi-inc.org/listinfo/spi-private</a> seems to
suggest the whole section is irrelevant for most subscribers.</p>
<p>I recommend the following:</p>
<ol>
<li>Indicate in <a class="moz-txt-link-freetext" href="http://lists.spi-inc.org/private/spi-private/">http://lists.spi-inc.org/private/spi-private/</a> that
all subscribers have a password, and that it can be sent as a
reminder.</li>
<li>Clarify the Spi-private Subscribers section by:</li>
<ol>
<li>Moving the paragraph about unsubscribing first.</li>
<li>Merging the first 2 paragraphs (the parenthesis can be
merged into the "Enter your admin address and password to
visit the subscribers list" paragraph.)</li>
<li>Fixing the "Unsubscribe or edit options" button's label so
it covers all its functions.<br>
</li>
</ol>
</ol>
<p>
</p>
<blockquote type="cite" cite="mid:20210411001242.GA1296@amellus.com">
</blockquote>
<pre class="moz-signature" cols="72">--
This mail's original content (non-quoted parts) is available under the Creative Commons Attribution-ShareAlike License 4.0.
Philippe Cloutier
<a class="moz-txt-link-freetext" href="http://www.philippecloutier.com">http://www.philippecloutier.com</a></pre>
</body>
</html>