[digiKam-users] Security ?

[Remco Viëtor]

On jeudi 2 mars 2023 12:39:15 CET Maik Qualmann wrote:
> @Gilles, don't you get this mail? It's a reminder email, I've been getting
> it every month for many years. Possibly configurable in the mail interface?
> I'll take a look tonight. But I also think that it is not a security
> problem, since more than logging in/out of the mail system is not possible.
> 
> Maik
> 
> Am Donnerstag, 2. März 2023, 07:26:11 CET schrieb Gilles Caulier:
> > Hi,
> > 
> > The mail server hosted in KDE infrastructure have been upgraded few
> > weeks ago by KDE admin. It sound like a configuration problem or
> > something like that. I recommend to report this problem to the KDE
> > admin team.
> > 
> > Note : we are (digiKam team) not responsible of mail server
> > administration. The project use as well the infrastructure
> > functionalities.
> > 
> > Best regards
> > 
> > Gilles Caulier
> > 
> > Le jeu. 2 mars 2023 à 06:28, Herman Callens
> > 
> > <herman.callens at outlook.be> a écrit :
> > > I got this mail today (see below signature) to remind me about my
> > > mailing
> > > list membership.
> > > 
> > > 
> > > 
> > > I am very worried about the fact that my password is included in this
> > > mail. This means that there is a real technological and organisational
> > > security-problem in you mailing-system en organisation.
> > > 
> > > 
> > > 
> > > 
> > > 
> > > 
> > > 
> > > 
> > > 
> > > 
> > > 
> > > 
> > > 
> > > Herman Callens
> > > 
> > > Welvaartstraat 77
> > > 
> > > 2530 Boechout
> > > 
> > > 
> > > 
> > > M.   herman.callens at outlook.be
> > > 
> > > G.   +32 (0)478 99 99 92
> > > 
> > > 
> > > 
> > > 
> > > 
> > > This is a reminder, sent out once a month, about your kde.org mailing
> > > list
> > > memberships.  It includes your subscription info and how to use it to
> > > change it or unsubscribe from a list.
> > > 
> > > 
> > > 
> > > You can visit the URLs to change your membership status or
> > > configuration,
> > > including unsubscribing, setting digest-style delivery or disabling
> > > delivery altogether (e.g., for a vacation), and so on.
> > > 
> > > 
> > > 
> > > In addition to the URL interfaces, you can also use email to make such
> > > changes.  For more info, send a message to the '-request' address of the
> > > list (for example, mailman-request at kde.org) containing just the word
> > > 'help' in the message body, and an email message will be sent to you
> > > with
> > > instructions.
> > > 
> > > 
> > > 
> > > If you have questions, problems, comments, etc, send them to
> > > mailman-owner at kde.org.  Thanks!
> > > 
> > > 
> > > 
> > > Passwords for callens.herman at telenet.be:
> > > 
> > > 
> > > 
> > > List                                     Password // URL
> > > 
> > > ----                                     --------
> > > 
> > > digikam-users at kde.org                    xxxxxxxxxxxxxxxxxx
> > > 
> > > https://mail.kde.org/mailman/options/digikam-users/callens.herman%40tele
> > > ne
> > > t.be
Also, I can't remember defining a password for web access, as I never 
connected to that site... Registering for the mailing list was done through 
email.

So, how can you make sure that someone connecting to the website has access to 
the email address, other than sending them the password by email?

Remco