>>See RFC 8058 on doing one-click unsubs in a way unlikely to be mistriggered.
Its a good idea, but don't count on all MUAs implementing this function, so best here is to have both, if request arrives from the RFC 8058 header, treat it as secure enough to warrant one-click, but if it arrives through the unsubscribe link in the email itself, require an extra click on button. Thus those with non-RFC8058-aware MUAs can still unsubscribe, but it will require an extra click. Some MUAs implement RFC 8058 through their Junk button, so you actually have to click Junk to trigger RFC 8058, which then both reports the mail as Junk but also triggers a RFC 8058 Post. _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
