3 ms·

I think you are mostly wrong. OP is complaining they sometimes have to enter their email address - that is absolutely unnecessary make-work. The page can prom

I think you are mostly wrong. OP is complaining they sometimes have to enter their email address - that is absolutely unnecessary make-work. The page can prompt the email address, and have a simple unsubscribe button. Not perfect, but okay. Even better, one-click unsubscribe features (e.g. Gmail's App) are presumably set up to work for the current recipient (not the original sender) so the problem is resolved for anyone using an email client with inbuilt unsubscribe. The forwarding problem is only for html link unsubscribe. Personally I hate trying to play find-the-ubsubscribe-link, so I use the email client feature where possible (which also helps Gmail rate/flag spam). Mostly I haven't had problems with repeat spammers, except a republican politician (I'm not in the USA so doubly annoying).

kijin 3y ago
Not everyone uses Gmail or a modern email client that understands the one-click List-Unsubscribe protocol, so senders must include an HTML unsubscribe link in the body of the email in order to comply with relevant rules in all jurisdictions. That link, unfortunately, can fall prey to the shenanigans I mentioned above. I understand the parent's sentiment because we all want to unsubscribe from unwanted emails. But technical standards can't distinguish unwanted emails from business-critical emails. You could legitimately cause someone damages by silently unsubscribing them from an important news feed. (Imagine that you silently unsubscribed an open-source maintainer from all github notifications!) Even worse, this kind of vulnerability disproportionately affects senders who try to follow the rules and make it easier for people to unsubscribe. Spammers don't care and keep spammin'. Ideally, an email would have both a one-click List-Unsubscribe header and an HTML unsubscribe link in the body. The latter need not be one-click, and in fact, if it's anything remotely important, should not be.
- cuu508 3y ago
  > Imagine that you silently unsubscribed an open-source maintainer from all github notifications!) Do open-source maintainers forward around their unsubscribe links in practice? The other problem with email scanners clicking links automatically can be solved without prompting for the email address. One simple solution is: if the link is clicked within a minute or so after sending the email there's a chance the clicker is an automated system. Instead of unsubscribing right away, serve a HTTP POST form with a single "Confirm Unsubscribe" button. Normal users will rarely see the form, automated systems will hesitate to fire off HTTP POST requests.
- account42 3y ago
  > The latter need not be one-click, and in fact, if it's anything remotely important, should not be. It absolutely should be one-click.
  - kijin 3y ago
    Since when are GET requests with side effects a good thing?
gumby 3y ago
> Mostly I haven't had problems with repeat spammers, except a republican politician (I'm not in the USA so doubly annoying). I’m a republican (also not in the US sense — I want to get rid of the tie to the monarchy) but I also find that republican politicians seem to be really annoying!

kijin 3y ago

Not everyone uses Gmail or a modern email client that understands the one-click List-Unsubscribe protocol, so senders must include an HTML unsubscribe link in the body of the email in order to comply with relevant rules in all jurisdictions. That link, unfortunately, can fall prey to the shenanigans I mentioned above. I understand the parent's sentiment because we all want to unsubscribe from unwanted emails. But technical standards can't distinguish unwanted emails from business-critical emails. You could legitimately cause someone damages by silently unsubscribing them from an important news feed. (Imagine that you silently unsubscribed an open-source maintainer from all github notifications!) Even worse, this kind of vulnerability disproportionately affects senders who try to follow the rules and make it easier for people to unsubscribe. Spammers don't care and keep spammin'. Ideally, an email would have both a one-click List-Unsubscribe header and an HTML unsubscribe link in the body. The latter need not be one-click, and in fact, if it's anything remotely important, should not be.

cuu508 3y ago
> Imagine that you silently unsubscribed an open-source maintainer from all github notifications!) Do open-source maintainers forward around their unsubscribe links in practice? The other problem with email scanners clicking links automatically can be solved without prompting for the email address. One simple solution is: if the link is clicked within a minute or so after sending the email there's a chance the clicker is an automated system. Instead of unsubscribing right away, serve a HTTP POST form with a single "Confirm Unsubscribe" button. Normal users will rarely see the form, automated systems will hesitate to fire off HTTP POST requests.
account42 3y ago
> The latter need not be one-click, and in fact, if it's anything remotely important, should not be. It absolutely should be one-click.
- kijin 3y ago
  Since when are GET requests with side effects a good thing?

gumby 3y ago

> Mostly I haven't had problems with repeat spammers, except a republican politician (I'm not in the USA so doubly annoying). I’m a republican (also not in the US sense — I want to get rid of the tie to the monarchy) but I also find that republican politicians seem to be really annoying!