that unsubs require confirmation makes a general one-click solution
difficult.
They needn't require confirmation.
Quite. Or, to put it another way, unsubs don't require confirmation;
some implementations of unsubs do.
It's always seemed broken to me. Unless there's been a history of
unsub attacks or some such to justify it, I can't see any reason to
require confirmation for unsubs. Ideally it would be a
per-subscription option, since people as well as lists can have a
history of attracting the sort of people who'll forge unsubs.
/~\ The ASCII Mouse
\ / Ribbon Campaign
X Against HTML mouse(_at_)rodents-montreal(_dot_)org
/ \ Email! 7D C8 61 52 5D E7 2D 39 4E F1 31 3E E8 B3 27 4B
_______________________________________________
Asrg mailing list
Asrg(_at_)irtf(_dot_)org
https://www.irtf.org/mailman/listinfo/asrg