Re: How secure is "+confirm"?

[Dave Barr <barr @ cis . ohio-state . edu>]

>Look at the variable $cookie_seed in the majordomo.cf file.  It permits you
>to put in your own private seed into the algorithm that generates the
>confirmation cookies.

I argued for a while that it should have used the list config password
as the cookie seed.  That would have stopped this attack.  Alas nobody
listened to me.

--Dave