The mailing list for listmasters using Sympa

[Hugo <address@concealed>]

In <address@concealed>, Chip Salzenberg writes:
:According to Hugo:
:> Looking at sympa-2.5.2, I think the error is in src/Commands.pm, and
:> should possibly change as in the attached patch; I'm not sure whether
:> the '$which' address needs more validation before this is safe, though.
:
:Well, since the body of the auth request is entirely generated by
:sympa, it can't be used for spamming.  So I think it'll be OK.

I thought the point of the authentication request was to stop one person
from subscribing or unsubscribing an unwilling second party.

Hugo