News for hackers. Stuff that matters.

A comment on Baremetrics required a phone call to cancel. Parent comment

Re:Baremetrics required a phone call to cancel by powersnail on Wednesday December 23, 2020 @02:26AM (#25515343)
Email isn't secure, but neither are phone calls.

If a customer emails to cancel, just email back a cancellation link that requires signing in. I think that's a good middle ground.

[ Parent | on HN ]
Re:Baremetrics required a phone call to cancel by Silhouette on Wednesday December 23, 2020 @02:54AM (#25515473)
Sure, but you can exchange credentials over the phone with acceptable safety in most situations, after which it's reasonable to accept that the other person is who they claim to be.

Obviously if someone does email asking to cancel, a suitable method of cancellation should be explained to them.

[ Parent | on HN ]