3 ms·

If your unsubscribe links are something impossible to guess (e.g., "https://example.com/spam/unsubscribe?d=<long https://example.com/spam/unsubscribe?d=<long, r

If your unsubscribe links are something impossible to guess (e.g., "https://example.com/spam/unsubscribe?d=<long https://example.com/spam/unsubscribe?d=<long, randomly generated string, which is a key into your DB>"), how could someone possibly get unsubscribed against their will?

icelancer 13y ago
What if I forward you a newsletter that I thought was interesting and you click the unsubscribe link?
gergles 13y ago
You (subscriber who wants the mail) forwards it to a friend who wants to /dev/null it; friend clicks unsub link and original subscriber stops getting the messages.