[Bug 200974] Insecure mailing list unsubscription with mailman

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Fri Jun 19 16:11:03 UTC 2015


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200974

            Bug ID: 200974
           Summary: Insecure mailing list unsubscription with mailman
           Product: Documentation
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Website
          Assignee: freebsd-doc at FreeBSD.org
          Reporter: xmj at FreeBSD.org

When unsubscribing from a mailing list, then clicking the link to 

https://lists.freebsd.org/mailman/confirm/freebsd-wireless/<hash> in the
confirmation mail,

and on that link hitting the "Unsubscribe" button, the form is sent insecurely,
which throws a security warning.

Please change the form action to use HTTPS, in consistency with mailman's
confirm URL.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-doc mailing list