[sword-devel] Mailing list archives are insecure!

DM Smith dmsmith at crosswire.org
Fri May 2 13:17:33 EDT 2025 

It’s documented on the bottom of each email. The page that it goes to has a link to the archive. No prefix is used. 

> On May 2, 2025, at 11:45 AM, David Haslam <dfhdfh at protonmail.com> wrote:
> 
> DM must be a fan of Jeremy!
> 
> Leo: Diddly Squat Farm: A popular British reality television series that premiered in 2021 on Amazon Prime Video. The show documents the life of Jeremy Clarkson, a well-known journalist and television presenter, as he attempts to run a farm in the Cotswolds region of England.
> 
> > The show is known for its mix of farming, DIY projects, and Jeremy's witty commentary.
> 
> Would you like to know more about the show or Jeremy Clarkson's farming adventures?
> 
> I hadn't really understood Troy's reply, as he didn't explain it quite so well as you just did.
> 
> What's the official URL we should use to access the list archives?
> Is it documented somewhere in our developers' wiki?
> 
> Best regards,
> 
> David
> 
> Sent with Proton Mail <https://pr.tn/ref/SWXT9A5YZ67G> secure email.
> 
> On Friday, May 2nd, 2025 at 4:09 PM, DM Smith <dmsmith at crosswire.org> wrote:
>> David, Troy explained it. You can have any prefix you like and the CrossWire web server will try to serve it as if there were none if it doesn’t match a known list of services.
>> diddly-squat.crosswire.org/pipermail/sword-devel <http://diddly-squat.crosswire.org/pipermail/sword-devel>
>> 
>> That Leo’s hallucination satisfied the implementation of the web server is just dumb luck.
>> 
>> DM
>> 
>>> On May 2, 2025, at 10:54 AM, David Haslam <dfhdfh at protonmail.com> wrote:
>>> 
>>> That doesn’t explain why the URL worked perfectly well and gave access to this very list. 
>>> 
>>> Explain that if you can. 
>>> 
>>> No LSD is required. 
>>> 
>>> David
>>> 
>>> Sent from Proton Mail <https://proton.me/mail/home> for iOS
>>> 
>>> 
>>> On Fri, May 2, 2025 at 15:18, DM Smith <dmsmith at crosswire.org <mailto:On Fri, May 2, 2025 at 15:18, DM Smith <<a href=>> wrote:
>>>> 
>>>> Leo is hallucinating. This is a well known problem of GPT agents.
>>>> 
>>>>> On May 2, 2025, at 8:13 AM, David Haslam <dfhdfh at protonmail.com> wrote:
>>>>> 
>>>>> Hi Troy, 
>>>>> 
>>>>> That's a curious question! 
>>>>> 
>>>>> Me:  What is pipermail?
>>>>> 
>>>>> Leo:  Based on the search results, **pipermail** appears to be a term related to electronic mailing lists, specifically the archives of mailing lists managed by the GNU Mailman software.
>>>>> 
>>>>> According to Wikipedia, GNU Mailman is a computer software application for managing electronic mailing lists, and pipermail is likely a part of this system. It seems that pipermail is used to access and browse the archives of mailing lists.
>>>>> 
>>>>> If you're looking for more information on pipermail, I can try to help you further. 
>>>>> 
>>>>> Me:   What is the URL for the archive of the CrossWire Bible Society's mailing list called sword-devel ? Leo: The URL for the archive of the CrossWire Bible Society's mailing list called sword-devel is not explicitly mentioned in the search results you provided. However, based on the context, it appears to be related to email list archives or mailing list management systems.
>>>>>      
>>>>> 
>>>>>       
>>>>> 
>>>>>      
>>>>> 
>>>>>      
>>>>> 
>>>>>       From the search results, it seems that the `pipermail` term is related to email list archives, specifically the archives of mailing lists managed by the GNU Mailman software. 
>>>>>      
>>>>> 
>>>>>      
>>>>> 
>>>>>       
>>>>> 
>>>>>      
>>>>> Given this information, it is possible that the URL for the archive of the CrossWire Bible Society's mailing list called sword-devel is in the format of `https://lists.crosswire.org/pipermail/sword-devel/` or something similar.
>>>>> 
>>>>> Aside: Leo is the AI agent in the Brave browser. 
>>>>> 
>>>>> So, now you know how I found it, is there something amiss with the aforementioned hostname? 
>>>>> I don't recall seeing it before, but, hey!
>>>>> 
>>>>> Best regards, 
>>>>> 
>>>>> David
>>>>> 
>>>>> Sent with Proton Mail <https://pr.tn/ref/SWXT9A5YZ67G> secure email.
>>>>> 
>>>>> On Friday, May 2nd, 2025 at 1:03 PM, Troy A. Griffitts <scribe at crosswire.org> wrote:
>>>>>> Don't use 'lists' dot crosswire.org. Where did you find that hostname? We have a catchall, so you can say https://bettyboop.crosswire.org <https://bettyboop.crosswire.org/> if you want, but the certificate won't be value for that domain.
>>>>>> 
>>>>>> On 5/2/25 6:46 AM, David Haslam wrote:
>>>>>>> If you visit (eg) https://lists.crosswire.org/pipermail/sword-devel/
>>>>>>> 
>>>>>>> The first thing you notice is a Browser Warning that the URL is insecure. 
>>>>>>> The https connection falls back to insecure http 
>>>>>>> 
>>>>>>> Please would someone with access to our server make the necessary changes for our list archives. 
>>>>>>> 
>>>>>>> 
>>>>>>> Best regards, 
>>>>>>> 
>>>>>>> David
>>>>>>> 
>>>>>>> Sent with Proton Mail <https://pr.tn/ref/SWXT9A5YZ67G> secure email.
>>>>>>> 
>>>>>>> 
>>>>>>> _______________________________________________
>>>>>>> sword-devel mailing list: sword-devel at crosswire.org <mailto:sword-devel at crosswire.org>
>>>>>>> http://crosswire.org/mailman/listinfo/sword-devel
>>>>>>> Instructions to unsubscribe/change your settings at above page
>>>>> 
>>>>> _______________________________________________ 
>>>>> sword-devel mailing list: sword-devel at crosswire.org 
>>>>> http://crosswire.org/mailman/listinfo/sword-devel 
>>>>> Instructions to unsubscribe/change your settings at above page
>>>> 
>>> _______________________________________________
>>> sword-devel mailing list: sword-devel at crosswire.org
>>> http://crosswire.org/mailman/listinfo/sword-devel
>>> Instructions to unsubscribe/change your settings at above page
>> 
> 
> _______________________________________________
> sword-devel mailing list: sword-devel at crosswire.org
> http://crosswire.org/mailman/listinfo/sword-devel
> Instructions to unsubscribe/change your settings at above page

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://crosswire.org/pipermail/sword-devel/attachments/20250502/776738d8/attachment.htm>

More information about the sword-devel mailing list