News for hackers. Stuff that matters.
Re:You know how HTTP GET requests are meant to be idempotent? by icebraining on Tuesday May 01, 2018 @08:00AM (#16966285)
Confirmation steps should only be used if the action can't be easily undone.
Re:You know how HTTP GET requests are meant to be idempotent? by bartread on Tuesday May 01, 2018 @08:49AM (#16966552)
It can't be easily undone if it was "clicked" by an automated process rather than a human being.
Re:You know how HTTP GET requests are meant to be idempotent? by jimktrains2 on Tuesday May 01, 2018 @08:33AM (#16966455)
And when a user receives an email saying they've been unsubscribed because an automated system prefetched the link, they won't be concerned or worried or confused at all. (Especially when this happens _every time_.
Re:You know how HTTP GET requests are meant to be idempotent? by tedunangst on Tuesday May 01, 2018 @03:57PM (#16970877)
And then the automated system clicks the undo link... Problem solved!
Re:You know how HTTP GET requests are meant to be idempotent? by simcop2387 on Wednesday May 02, 2018 @12:47AM (#16974132)
Which fires off a new email thanking them for re-subscribing.

Soon your inbox is full.