Unsubscribe links

Unsubscribe should read the reader's machine, not ours

Anybody who wants out of an email should be out on the first click, from their own machine.

Our daily digest gets built by fetching the finished page from wherever the sender happens to be running, and that same address was getting written into the unsubscribe link at the bottom of the mail. Those are two separate questions. Where we read the page from is ours to answer. What the link points at belongs to the reader, and on a laptop the first answer is the laptop, which is harmless right up until the mail leaves the building.

We now only put a public web address in that link, and where there isn't one we use the site's own domain instead.

<caption>The unsubscribe link was built from whatever machine sent the mail, so now it only ever uses the public address.</caption>

#email