News for hackers. Stuff that matters.
Re:Millions of email addresses leaking to advertising and an... by user5994461 on Friday May 01, 2020 @08:07AM (#23041206)
Email 101: Clickable links in emails are always GET, so extra parameters are set in the query string.

Marketing 101: User actions should take as little clicks as possible, so the action should be performed as soon as the user clicks the (GET) link.

Re:Millions of email addresses leaking to advertising and an... by shkkmo on Friday May 01, 2020 @09:43AM (#23041889)
> Marketing 101: User actions should take as little clicks as possible, so the action should be performed as soon as the user clicks the (GET) link.

Nope, some email clients might prefetch urls in email for various reasons. You should absolutely NOT do this (unless you are decitefully trying to game you engagement metrics.) The only case where you might be able to get away with it is when the user has an active login session that you can verify prior to performing the action.

Re:Millions of email addresses leaking to advertising and an... by tzs on Saturday May 02, 2020 @10:16AM (#23051907)
In the case of email, the sender already knows your email address and so should have no need to put it in the URL. The URL should only have some long random or pseudorandom identifier that has no meaning to anyone but them.