Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Email confirmation URL should require interaction #2900

Closed
hatclub opened this issue Feb 1, 2018 · 3 comments
Closed

Email confirmation URL should require interaction #2900

hatclub opened this issue Feb 1, 2018 · 3 comments

Comments

@hatclub
Copy link

hatclub commented Feb 1, 2018

v2.3.13

Just following the link in the verify email is enough to subscribe someone, some mail scanning systems will follow links as standard to look for suspect content causing the address to become verified.

Cachet should, IMO, require the user to interact with the page to actually confirm their subscription.

@nalysius
Copy link
Contributor

nalysius commented Mar 1, 2018

Hello,
I receive many email from many websites and the subscription pages never ask me any confirmation. Even when I register on a website, I have to click on a link in an email. This link doesn't have any confirmation.
Though, it would be possible to add a confirmation. Otherwise, perhaps there is a standard for these mail scanning systems and if so they may have a standardized user-agent like many bots.

@jbrooksuk
Copy link
Member

@hatclub what does StatusPage.io do? I'm sure that previously this wasn't the case for them either. I'm also keen on as little friction as possible.

@jbrooksuk
Copy link
Member

This will be fixed in #3102

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants