Security
The Security tab is used to set security measures for the Email Submitted Content. The fields available are explained in the table below:
| Field Name | Description |
|---|---|
|
Reject Email Submissions |
This setting determines whether all submissions sent via email should be automatically rejected. By default,
your list is set to allow submissions by email. If you change Reject Email Submissions to Email can fairly easily be spoofed; that is, someone can make the email appear to be from someone it is not from. Thus, email is not a very secure mechanism for authenticating users. Someone malicious can configure their email program to be someone else and send messages as if they were that person In most mailing list situations, users behave ethically, and do not impersonate others, so the risk of abuse is minimal. However, you may have a need to have as much security as possible so that there is very little risk of improper email getting posted to your list. In such a case, you might want to disallow all postings over email. Only postings through the web interface or postings made with a script is allowed. Note These postings are subject to normal security settings, such as moderation, match phrases and so on |
|
Only Admins Can Send |
When this is set to By default, this setting is set to |
|
Require Password in Body |
This option determines whether lists postings contributed by email require senders to include their personal passwords in the following format:
For example, if you are posting to a list that requires the password in the body, and your password is
Your password is automatically removed before your message is distributed so others won't see it Passwords are only required for members who have passwords. If certain members do not have passwords, this option does not have any affect on their ability to post messages to the list. If you want all members to have passwords, and for their passwords to be required in all list postings, you should also set "Require Password to be true. Require Password in Body (is distinct from Password Required) requires that all members have passwords. For more information, see New subscriber requirements Including a password in an email message is inherently insecure. If you are concerned about password security, do not require a password in the body of the message. |