Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

FWIW, this solution isn't as easy to implement as you'd think. I've seen unsubscribe pages harvested for email addresses when they show the full address and used urls/tokens that weren't sufficiently secure. In the case I'm thinking of, the home-rolled algo that generated the unique links was bugged enough that you could reverse it, and I was surprised that someone actually took the time to do so.


Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: