1

Are there any risks with an "unsubscribe" link in e-mails that never expires?

The e-mails are sent to customers. The token used to unsubscribe the customer will include a customer ID encoded using JSON Web Tokens (JWT) tokens.

Thanks

Improve this question
3
  • "In emails"? Are you really asking about a link that would be included in every email sent to a mailing list? What would be the rationale to make it expire? It would only mean users would have to wait for another email or use a different means to unsubscribe.
    – techraf
    Commented Jun 10, 2016 at 3:31
  • Related: security.stackexchange.com/questions/115964/…
    – rink.attendant.6
    Commented Jun 10, 2016 at 3:54
  • The only reason I can imagine is resource related. If every link is customized then a database has to map these links onto the user account that is allowed to unsubscribe via the link. Btw, this is not session-management related?
    – Silver
    Commented Jun 10, 2016 at 10:25

1 Answer 1

Reset to default
2

I can not see any real disadvantage for your users. The worst that could happen to them would be to have to resubscribe.

Note that with the current efforts put in anti-SPAM regulations and controls, every one with a mailing list should be extremely careful to properly maintain it. You certainly much prefer to have someone opt-out than having them report your message as SPAM.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .