Web page security
Any web page on cosmos.phy.tufts.edu can be accessed in a secure
fashion by using "https" instead of "http". The cosmos.phy.tufts.edu
web server now has a proper certificate from Let's Encrypt.
Mailman password security
If you want to have a secure password, you can go to https://cosmos.phy.tufts.edu/mailman/listinfo/,
select your list, and change your password. Unlike the default
mailman installation, cosmos.phy.tufts.edu will not send out your
password regularly, so it will not normally be accessible to packet
sniffers. However, it is still possible that someone could use the
web interface to request that your password be sent to you and then
spy on it.