tl;dr location ~ ^/hyperkitty { # Turn off archiving for Mailman3 allow 1.2.3.4; deny all; }

There should be a better way (https://gitlab.com/mailman/hyperkitty/issues/219)

Problem fixed, but at he cost of no archives and a broken "archives" link.

On 22/02/19 9:03 PM, Johannes Winter wrote:

Am Thu, 21 Feb 2019 12:23:41 +1300 schrieb worik <root@worik.org>:

...

When I load my new mailing list system, before I log in, I can see the archives of all the lists.  Without logging in.  Even lists with archives set to private archives.

What can I do about that? Are you sure that you really can see the list contents? In my case only the listnames are shown, which is not nice, but bearable.

Yes, that is true.  Since I made my first post on this thread (which was a bit premature) I have researched this further.

All messages posted before the archives are made private are displayed for all to ee, and I can find no ay of changing that except by making hyperkitty a dead link, as above.

Displaying all lists on the server is unacceptable for my users.  My users are involved in political activism and displaying the names of all the lists is a political risk.  (As distinct from privacy or security risks).

There is an open issue about that: https://gitlab.com/mailman/hyperkitty/issues/197

Would be happy for workaround ideas, too.

Yes.  It has been open for half a year, https://gitlab.com/mailman/hyperkitty/issues/129 for a year.  The problem is that Hyperkitty does not  "...use the list's |advertised| setting to show or hide it...". 

IMO this is also a bug in Mailman core.  Clearly Archivers need to respect changes in the statius of a list and change the status of archives already collected (not a trivial matter) but Mailman should not hand over the names of lists where archives are turned off.

As I write I realise I have not tested creating a list with archives off from the get go...

Worik

Johannes Winter

-- If not me then who? If not now then when? If not here then where? So, here I stand, I can do no other root@worik.org 021-1680650, (03) 4821804 Aotearoa (New Zealand)