Developers of Sympa

[Aumont <address@concealed>]

Nicolas Brouard wrote:

> "Password are currently NOT crypted in the database. Considering that most
> people use a single password for almost any usage, this is a security
> problem. It could be crypted with a reversible algorithm, thus allowing
> password reminding. "
> 
Yes we will introduce a reversible encryption asap.
 
> but because I don't trust the local list manager.
If you don't trusted the local listmaster, you will never have a secure 
solution
Even HTTPS allow listmaster to add some logs of password in sympa itself.

Serge
-- 
-----------------------------------------------------------
Serge Aumont        Comité Réseaux des Universités
                     Campus Beaulieu 
                     35042 Rennes Cedex   +33 2 998 471 47