Page MenuHomePhabricator

Spike: unsubscribe might have to be a mailto now, rather than an https link
Closed, DeclinedPublic2 Estimated Story PointsSpike

Description

There's been some speculation that major email providers will stop parsing a List-Unsubscribe header if it contains a link rather than a mailto address, due to phishing and malware. I think this has happened on gmail now, cos there's no longer an unsubscribe button above our thank-you letters.

If true, we would have to reimplement unsubscribe as a mailto.

Our thank yous currently use $mailParams['List-Unsubscribe'] = "<mailto:{$verp['unsubscribe']}>";

ie an email not a link

  • this would affect thank you emails, acoustic emails (they should have that in hand I think)

Event Timeline

12:17 < ejegg> looks like outlook.com is only using the mailto now: 
               https://blog.returnpath.com/evolution-of-list-unsubscribe/

Also, we can easily test this by sending ourselves experimental List-Unsubscribe headers...

DStrine set the point value for this task to 2.
DStrine moved this task from Triage to Sprint +1 on the Fundraising-Backlog board.

There is Civi functionality we can leverage for this. Using the wmf_communication module's 'add CiviMail records' gives us bounce headers now, but can easily be extended to give us list-unsubscribe headers too.

DStrine lowered the priority of this task from High to Medium.Jan 26 2017, 12:18 AM
DStrine moved this task from Sprint +1 to Q3 2021-2022 on the Fundraising-Backlog board.

It would simplify our drupal upgrade if we got rid of List-unsubscribe

Restricted Application changed the subtype of this task from "Task" to "Spike". · View Herald TranscriptMay 2 2023, 9:50 PM
Eileenmcnaughton raised the priority of this task from Medium to High.Jan 3 2024, 12:33 AM