On 5/17/18 3:35 AM, Henrik Rasmussen wrote:
I am also concerned that new lists are created with a subscription policy "Confirm" as default, rather than at least "Moderate", which can cause people to be subscribed by others against there will.
I'm confused. Confirm sends a confirmation request to the subscribed address which must be acted upon by the user before she is added to the list. Moderate just means approval by an owner/moderator which, it seems to me is more susceptible to a 3rd party subscribe succeeding - i.e., subscription requires membership in some organization. A subscribes B who is a member of the organization but doesn't want to be on the list. The moderator verifies that B is an organization member and approves the subscription.
Granted, it may be possible for some brain-dead vacation responder to confirm a subscription request, but that's a separate issue.
Also, regardless of this setting, administrators can subscribe people without their knowledge.
Granted that this can be abused, but not allowing admins to directly add members will probably create more problems than it solves.
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan