#278 Option to NOT confirm unsubscribe

open
nobody
None
5
2008-04-25
2008-04-25
Bret Miller
No

I'd like to see an option to NOT confirm unsubscribe while still requiring a confirm on subscribe. I realize that means that someone could maliciously unsubscribe someone, but overall I think that possibility is better than requiring people to unsubscribe twice to get off a list.

Discussion

  • Mark Sapiro
    Mark Sapiro
    2008-04-25

    Logged In: YES
    user_id=1123998
    Originator: NO

    I moved this to Feature Requests since that's what it is.

     
  • Mark Sapiro
    Mark Sapiro
    2008-04-25

    • labels: 103807 -->
     
  • Cedric Knight
    Cedric Knight
    2011-04-15

    I think bug 1269025 is basically a duplicate of this. I read bug 1269025 as suggesting that a list could optionally be configured not to send confirm messages and allow an unsubscribe by email without the password, or via web; having send_goodbye_msg set to "yes" provides a certain level of security against abuse. This is also suggested in a message on mailman-users in 2001 <http://mail.python.org/pipermail/mailman-users/2001-June/011729.html> as an additional supervisor function ALLOW_OPEN_SUBSCRIBE, and again in 2005 <http://mail.python.org/pipermail/mailman-users/2005-May/044573.html>. I would prefer an additional value for mlist.unsubscribe_policy =2 meaning no approval and no confirmation necessary - instant unsubscribe without any authorisation needed. Perhaps it could generate a warning if send_goodbye_msg==0, but I don't see any reason site managers would want to restrict it.

    Note that a one-click web unsubscribe is apparently possible for non-digest users provided "personalize" is set to "yes" (or probably "full"). I find that on a one-to-many list of several thousand there can be a significant number of complaints from users who simply don't seem to be able to get their head around either requesting a password or responding to a confirmation token, which produces spam reports and requires moderator intervention, so have stuck the following in the footer:
    To unsubscribe, click %(web_page_url)soptions%(cgiext)s/%(_internal_name)s/?email=%(user_address)s&password=%(user_password)s&unsub=Unsubscribe&unsubconfirm=1