[Mailman-Developers] Mailman unsubscribe mechanism unclear

[Barry Warsaw]

On Wed, 2004-01-28 at 16:33, Somuchfun wrote:

> Can someone explain the exact mechanism mailman uses for unsubscriptions? I
> see some of them are done without a confirmation and some members get an
> email with a token asked to return it to confirm their unsubscription.
> I have played around with mailman but are not able to figure out how it
> determines when a confirmation is needed and when not.
> Hostile unsubscriptions are a growing problem and I would need a way to make
> sure all unsubscriptions need to be confirmed.

It's simple.

If the unsub request comes from a trusted source, e.g. a logged in user
or the list admin through the admin pages, no confirmation message is
sent.

If the request comes from an untrusted source, e.g. a non-logged in user
sitting at the options page login, or via an email request, then a
confirmation message is sent.

-Barry