Hey developers, stop forcing me to login to unsubscribe
61–70 of 137 posts
Re: Hey developers, stop forcing me to login to unsubscribe
#62Re: Hey developers, stop forcing me to login to unsubscribe
#63We have a lot of other cool stuff in emails like single click logins, viewing pixels with custom payloads, our open source drip campaign mailer for Django, and much more. If there is any interest, I'd be happy to go into deeper detail.
Re: Hey developers, stop forcing me to login to unsubscribe
#64Earlier quoted context omitted.
Then you're punishing the good guys.
The good guys don't send me mail I didn't ask for.
I'm looking at you, LinkedIn and Twitter. I've unsubscribed from about three or four waves of your bullshit. No, I don't care about what I might have "missed on Twitter". I didn't subscribe to this, you spamming fucks.
Re: Hey developers, stop forcing me to login to unsubscribe
#65Re: Hey developers, stop forcing me to login to unsubscribe
#66I never log in in such circumstances, I just hit the 'spam' button and that's that. I trust the email service to categorize the further emails accordingly and that's what usually happens.
Re: Hey developers, stop forcing me to login to unsubscribe
#67At Zapier, we jumped through a lot of extra hoops to make sure that emails are categorized and you can easily opt-out with a single click (no matter if you are logged in or not). Some emails cannot be opted out of (the only two right now are payment transactions and forgotten/reset password) but everything else can be. We have a lot of other cool stuff in emails like single click logins, viewing pixels with custom pa…
Re: Hey developers, stop forcing me to login to unsubscribe
#68Earlier quoted context omitted.
What constitutional right is being violated here?
No right is being violated. It is a breach of duty: "Congress shall make no law ... abridging the freedom of speech, or of the press". Even ignoring the first amendment, there is no enabling clause that grants the general power to regulate communication.
Freedom of speech does NOT involve the freedom to send individually addressed messages to anyone. There is no freedom to spam.
Re: Hey developers, stop forcing me to login to unsubscribe
#69At Zapier, we jumped through a lot of extra hoops to make sure that emails are categorized and you can easily opt-out with a single click (no matter if you are logged in or not). Some emails cannot be opted out of (the only two right now are payment transactions and forgotten/reset password) but everything else can be. We have a lot of other cool stuff in emails like single click logins, viewing pixels with custom pa…
I'd be interested if you have details on handling single-click login as securely as possible.
Basically, reuse a lot of signing functions that you might find in a library (IE: Django's https://docs.djangoproject.com/en/dev/topics/signing/), don't roll your own. Then, keep track of last login IP address and block auto-logins when they mismatch. Then, set a max age for the login links to work (for example, 24 hours). There are a few other things we do as well, but those are the major ones.
Those three combined are fairly secure.
Re: Hey developers, stop forcing me to login to unsubscribe
#70Companies like LinkedIn are training users (at least me) to report as spam instead of unsubscribing because it's an exercise in futility to try to opt-out of their spam.