Web page security

Any web page on cosmos.phy.tufts.edu can be accessed in a secure fashion by using "https" instead of "http". The cosmos.phy.tufts.edu web server now has a proper certificate from Let's Encrypt.

Mailman password security

If you want to have a secure password, you can go to https://cosmos.phy.tufts.edu/mailman/listinfo/, select your list, and change your password. Unlike the default mailman installation, cosmos.phy.tufts.edu will not send out your password regularly, so it will not normally be accessible to packet sniffers. However, it is still possible that someone could use the web interface to request that your password be sent to you and then spy on it.