Open rjenks opened 7 years ago
Users should not have to login to unsubscribe. Every Announce email should just contain a single click link to unsubscribe.
The URL should not be guessable such that a bad actor could unsubscribe someone else's email.
Announce emails should include this URL in a List-Unsubscribe header per RFC 2369 http://www.faqs.org/rfcs/rfc2369.html
Users should not have to login to unsubscribe. Every Announce email should just contain a single click link to unsubscribe.
The URL should not be guessable such that a bad actor could unsubscribe someone else's email.
Announce emails should include this URL in a List-Unsubscribe header per RFC 2369 http://www.faqs.org/rfcs/rfc2369.html