[Bug 266806] Re: unsubscribe removal confirmation should be optional

[Cedders]

I think Sourceforge bug 1951777
<http://sourceforge.net/tracker/?func=detail&aid=1951777&group_id=103&atid=350103>
is a duplicate of this, and have commented there as follows.

As I understand it, this bug suggests that a list could optionally be
configured not to send confirm messages and allow an unsubscribe by
email without the password, or via web; having send_goodbye_msg set to
"yes" provides a certain level of security against abuse. This is also
suggested in a message on mailman-users in 2001
<http://mail.python.org/pipermail/mailman-users/2001-June/011729.html>
as an additional supervisor function ALLOW_OPEN_UNSUBSCRIBE, and again
in 2005 <http://mail.python.org/pipermail/mailman-
users/2005-May/044573.html>.

I would prefer instead of ALLOW_OPEN_SUBSCRIBE an additional value for
mlist.unsubscribe_policy =2 meaning no approval and no confirmation
necessary - instant unsubscribe without any authorisation needed.
Perhaps it could generate a warning if send_goodbye_msg==0, but I don't
see any reason site managers would want to restrict it.

Note that a one-click web unsubscribe is possible for non-digest users
provided "personalize" is set to "yes" (or "full"). I find that on a
one-to-many list of several thousand subscribers there can be a
significant number of complaints from users who simply don't seem to be
able to get their head around either requesting a password or responding
to a confirmation token.  This failure to follow the instructions
produces spam reports and requires moderator intervention.   So this can
go the footer (this is the short form suggested by Jimm Tittsler in
http://mail.python.org/pipermail/mailman-users/2005-May/044961.html):

To unsubscribe click the link below:
<%(user_optionsurl)s?password=%(user_password)s&unsub=1&unsubconfirm=1>

However, this isn't the full solution that another choice of
unsubscribe_policy would give.  (I may have a go at implementing this.)


** Bug watch added: SourceForge.net Tracker #1951777
   http://sourceforge.net/support/tracker.php?aid=1951777

-- 
You received this bug notification because you are a member of Mailman
Coders, which is subscribed to GNU Mailman.
https://bugs.launchpad.net/bugs/266806

Title:
  unsubscribe removal confirmation should be optional