[Cryptography] Why is emailing me my password?

[John Young]

The several crypto lists run by mailman email passwords monthly.
Open crypto lists are not meant to be more trustworthy than open
crypto.



At 10:28 AM 10/1/2013, you wrote:
>This falls somewhere in the land of beyond-the-absurd.
>
>Just got this message from your robot:
>
>On Oct 1, 2013, at 5:00 AM, mailman-owner@metzdowd.com wrote:
>
> > If you have questions, problems, comments, etc, send them to
> > mailman-owner@metzdowd.com.  Thanks!
> >
> > Passwords for greg@kinostudios.com:
> >
> > List                                     Password // URL
> > ----                                     --------
> > cryptography@metzdowd.com                iPoopInYourHat
> > http://www.metzdowd.com/mailman/options/cryptography/greg%40kinostudios.com
>
>So, my password, iPoopInYourHat, is being sent to me in the clear by 
>your servers.
>
>Of all the places on the internet, this would be on the last places 
>I would expect this to happen.
>
>- Greg
>
>--
>Please do not email me anything that you are not comfortable also 
>sharing with the NSA.
>
>
>
>_______________________________________________
>The cryptography mailing list
>cryptography@metzdowd.com
>http://www.metzdowd.com/mailman/listinfo/cryptography