https://docs.inboxsys.com/index.php?action=history&feed=atom&title=One-Click_List-Unsubscribe 2026-05-25T18:09:38Z Revision history for this page on the wiki MediaWiki 1.45.3 https://docs.inboxsys.com/index.php?title=One-Click_List-Unsubscribe&diff=330&oldid=prev 2024-10-07T14:15:35Z

<p></p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 16:15, 7 October 2024</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l3">Line 3:</td> <td colspan="2" class="diff-lineno">Line 3:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>[[Category:E-Mail_analysis]]</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>[[Category:E-Mail_analysis]]</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>[[Category:InboxSys]]</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>[[Category:InboxSys]]</div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">[[Category:Reporting]]</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>&#039;&#039;&#039;One-Click List-Unsubscribe&#039;&#039;&#039; was invented as a solution to solve a fatal flaw in the https-method of the [[List-Unsubscribe]] mechanism. The unsubscribe https-links in the List-Unsubscribe header require a one-click GET mechanism. That means, when the link is clicked, the unsubscription is immediate and all parameters involved are visible from the URL. This mechanism is vulnerable to mistakes and abuse. The List-Unsubscribe link can easily be executed by accident or malicious intent.</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>&#039;&#039;&#039;One-Click List-Unsubscribe&#039;&#039;&#039; was invented as a solution to solve a fatal flaw in the https-method of the [[List-Unsubscribe]] mechanism. The unsubscribe https-links in the List-Unsubscribe header require a one-click GET mechanism. That means, when the link is clicked, the unsubscription is immediate and all parameters involved are visible from the URL. This mechanism is vulnerable to mistakes and abuse. The List-Unsubscribe link can easily be executed by accident or malicious intent.</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <!-- diff cache key c1mediawiki:diff:1.41:old-310:rev-330:php=table --> </table>

Sebastian https://docs.inboxsys.com/index.php?title=One-Click_List-Unsubscribe&diff=310&oldid=prev 2024-06-11T22:26:21Z

<p></p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 00:26, 12 June 2024</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l35">Line 35:</td> <td colspan="2" class="diff-lineno">Line 35:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>* [https://datatracker.ietf.org/doc/html/rfc8058 RFC 8058]</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>* [https://datatracker.ietf.org/doc/html/rfc8058 RFC 8058]</div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">* [https://inboxsys.com/introducing-the-one-click-unsubscribe-to-inboxsys/ InboxSys blog article about One-Click List-Unsubscribe]</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>* [https://certified-senders.org/wp-content/uploads/2017/07/CSA_one-click_list-unsubscribe.pdf CSA whitepaper]</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>* [https://certified-senders.org/wp-content/uploads/2017/07/CSA_one-click_list-unsubscribe.pdf CSA whitepaper]</div></td></tr> <!-- diff cache key c1mediawiki:diff:1.41:old-298:rev-310:php=table --> </table>

Sebastian https://docs.inboxsys.com/index.php?title=One-Click_List-Unsubscribe&diff=298&oldid=prev 2024-05-09T14:42:32Z

<p></p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 16:42, 9 May 2024</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l35">Line 35:</td> <td colspan="2" class="diff-lineno">Line 35:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>* [https://datatracker.ietf.org/doc/html/rfc8058 RFC 8058]</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>* [https://datatracker.ietf.org/doc/html/rfc8058 RFC 8058]</div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">* [https://certified-senders.org/wp-content/uploads/2017/07/CSA_one-click_list-unsubscribe.pdf CSA whitepaper]</ins></div></td></tr> <!-- diff cache key c1mediawiki:diff:1.41:old-297:rev-298:php=table --> </table>

Sebastian https://docs.inboxsys.com/index.php?title=One-Click_List-Unsubscribe&diff=297&oldid=prev 2024-05-09T14:36:30Z

<p>Created page with &quot;<a href="/index.php/Category:Deliverability" title="Category:Deliverability">Category:Deliverability</a> <a href="/index.php/Category:Content" title="Category:Content">Category:Content</a> <a href="/index.php/Category:E-Mail_analysis" title="Category:E-Mail analysis">Category:E-Mail_analysis</a> <a href="/index.php/Category:InboxSys" title="Category:InboxSys">Category:InboxSys</a> &#039;&#039;&#039;One-Click List-Unsubscribe&#039;&#039;&#039; was invented as a solution to solve a fatal flaw in the https-method of the <a href="/index.php/List-Unsubscribe" title="List-Unsubscribe">List-Unsubscribe</a> mechanism. The unsubscribe https-links in the List-Unsubscribe header require a one-click GET mechanism. That means, when the link is clicked, the unsubscription is immediate and all parameters involved are visible from the URL. This mechanism i...&quot;</p> <p><b>New page</b></p><div>[[Category:Deliverability]]<br /> [[Category:Content]]<br /> [[Category:E-Mail_analysis]]<br /> [[Category:InboxSys]]<br /> &#039;&#039;&#039;One-Click List-Unsubscribe&#039;&#039;&#039; was invented as a solution to solve a fatal flaw in the https-method of the [[List-Unsubscribe]] mechanism. The unsubscribe https-links in the List-Unsubscribe header require a one-click GET mechanism. That means, when the link is clicked, the unsubscription is immediate and all parameters involved are visible from the URL. This mechanism is vulnerable to mistakes and abuse. The List-Unsubscribe link can easily be executed by accident or malicious intent.<br /> <br /> This vulnerability can be combated, by adding a specific header to your messages, in addition to the List-Unsubscribe header. The &#039;&#039;&#039;One-Click List-Unsubscribe&#039;&#039;&#039;-header:<br /> <br /> &lt;pre&gt;<br /> List-Unsubscribe:&lt;mailto:listrequest@example.com?subject=unsubscribe&gt;,&lt;https://example.com/unsubscribe.html?opaque=123456789&gt;<br /> List-Unsubscribe-Post: List-Unsubscribe=One-Click<br /> &lt;/pre&gt;<br /> <br /> This header simply says, that the displayed GET variables should be sent in a POST request, instead of a GET request. The POST request from the example to your unsubscription-landing-page would look like this: <br /> <br /> &lt;pre&gt;<br /> POST /unsubscribe.html?opaque=123456789<br /> HTTP/1.1 Host: example.com<br /> Content-Type: application/x-www-form-urlencoded<br /> Content-Length: 26 List-Unsubscribe=One-Click<br /> &lt;/pre&gt;<br /> <br /> On your landing page it&#039;s very important to: <br /> <br /> * Process POST requests<br /> * &#039;&#039;&#039;Ignore GET requests&#039;&#039;&#039;<br /> <br /> =One-Click List-Unsubscribe in InboxSys=<br /> In the content-section of InboxSys campaign tests, you can see: <br /> <br /> * If your One-Click List-Unsubscribe header is present<br /> * If your One-Click List-Unsubscribe header is syntactically correct<br /> <br /> =Useful links=<br /> <br /> * [https://datatracker.ietf.org/doc/html/rfc8058 RFC 8058]</div>

Sebastian