On Wed, May 20, 2015 at 02:46:34PM +0300, Jari Arkko wrote:
FYI, here is a bit more detail regarding the issues we encountered:
The main issue:
What we discovered is that it's not possible, in Mailman, to turn
this off for everyone whilst still allowing individuals to
selectively turn it back on. We had thought that was the case
initially, but it turned out Mailman doesn't behave that way. This
is why we're back in this position now.
[...]
OK, but note this has nothing to do with security.
Also, the answer to my question is: on-demand password reminders (e.g.,
for changing subscription options) thankfully still works.
Nico
--