On Thu, 9 Jun 2016 13:02:05 -0400 Al Iverson <aiver...@spamresource.com> wrote:
> On Thu, Jun 9, 2016 at 12:24 PM, <tobias.herk...@optivo.de> wrote: > > On Thu, 9 Jun 2016 11:53:16 -0400 > > Al Iverson <aiver...@spamresource.com> wrote: > > > >> This also brings us back to the issue of what happens when security > >> devices or services click the link, instead of the subscriber. In > >> this scenario, it sounds like it would cause an unsubscribe that > >> was not actually requested by the recipient. I think that is > >> suboptimal. > > > > No it doesn't, the solution described in the document especially > > solves this issue. > > I think it is an insufficient solution that potentially allows a > security device developer or service to build one click URLs just as > easily as the ISP could. So it's got two things that I don't like. > 1- You're requiring the ISP to identify and include a token in the URL > - I don't think they should have to build something. > 2- What's being built is just as easily added in by any security > device who decides they know better than the subscriber and want to > cause that unsubscribe. > > Cheers, > Al Iverson With these arguments you can shoot down everything, SPF, DKIM, DMARC... I'm not even trying to solve intended malicious behavior because it is much more complex and I don't want to pick up a fight right now, I'm simply not in the position to do that. The ORT session requirement or question never wanted to solve this completely different issue at all. Every other solution that came up in this discussion, run down to possible pathes: 1# much more complex idea, that tries to solve a lot more than the initial question asked for... 2# leaving the situation like it is right now without changing anything Kind regards, / Tobias Herkula -- optivo GmbH Head of Deliverability & Abuse Management Wallstraße 16 10179 Berlin Germany Tel: +49(0)30-768078-129 Fax: +49(0)30-768078-499 Email: mailto:t.herk...@optivo.com Website: http://www.optivo.com Linkedin: http://www.linkedin.com/in/tobiasherkula Commercial register: HRB 88738 District Court Berlin-Charlottenburg Executive board: Dr. Rainer Brosch, Thomas Diezmann Vat reg. no.: DE813696618 optivo A company of Deutsche Post DHL Group _______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
