No, but a 2-step procedure is recommended. Click the link, then push a button to confirm. Some actors also require a checkbox, to really make sure link-following bots don't confirm. Or even a simple captcha. Don’t neccessarly need to use POST, but scanning systems scan the links to ensure no malicious software is there or similar.
So just making the unsubscribe request in a second link is enough, scanning bots don't follow more than 1 step in most cases, and for 2-step following bots, a checkbox is enough to veer them off. If they feel the urge of following subsequent links to check for malice, they will also follow POST based links, else malware actors could just hide everything behind a POST. POST/GET is only to prevent certain caching and reloading behaviour to affect things on a server, for example, reloading a page might delete something or similar. -----Ursprungligt meddelande----- Från: Grant Taylor via mailop <mailop@mailop.org> Skickat: den 28 juni 2023 22:22 Till: mailop@mailop.org Ämne: Re: [mailop] Mimecast Adimin Probation Block - 74.203.49.59 On 6/28/23 11:07 AM, Chris Truitt via mailop wrote: > The Mimecast spam checking appears to be clicking every link. This has > inadvertently caused an uptick in Unsubscribes. Aside: Isn't this why the unsubscribe links are encouraged to use / require a POST so that simple GETs don't accidentally trigger the unsubscribe? Grant. . . . _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
