Unsubscribe link security

rajatag · May 2014

Hello,

The unsubscribe link is pretty insecure. If I keep changing the id and access the link it can unsubscribe the entire list.

I would suggest converting that to a unique MD5 hash of the email address so that it cannot be misused by any subscriber.

Thank you,

Ben · May 2014

Hi,

Please see → https://sendy.co/forum/discussion/1344/encrypt-subscriber-emails-in-unsubscribe-url/p1

Thanks.

Best regards,
Ben

rajatag · May 2014

Hello,

Actually when sending out a test email the unsubscribe link is not encrypted leading to my confusion.

Regards,
Rajat

Ben · May 2014

Test emails won't have links encrypted, there's no need to. Only when the campaign is sent out for real, the links are converted (and encrypted) to be tracked for the report.

Unsubscribe link security

Comments