Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

No, I do not agree.

1. In a browser, the link would lead to a confirmation page POSTed to the server

2. In an API, there's no real sense in doing that, but it'd probably be a DELETE on the subscription resource.



What about from an email?


The link takes you to a page with a form where you can confirm by POSTing (to the user: submitting).


Hmm that could work for an unsubscribe page, since the user is motivated to make the second click. However, for an email with a sign up link or a subscription confirmation link having an extra step could reduce your conversion rate somewhat.


but OTOH semantics of GET allow e-mail servers to implement a link scanner that e.g. checks all linked pages for phishing.

That breaks (and likely is broken already in practice) when pages don't respect semantics of GET and unsubscribe/verify, etc. when page is merely displayed.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: