# Improving our unsubscribe functionality

**URL:** <https://meta.discourse.org/t/improving-our-unsubscribe-functionality/41448>\
**Category:** Feature\
**Created:** [22 مارس 2016، 11:44م UTC](https://meta.discourse.org/t/improving-our-unsubscribe-functionality/41448 "2016-03-22T23:44:40Z")\
**Posts on this page:** 1\
**Showing post:** 16

<div class="post-metadata">

**Author:** ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)\
**Post date:** [23 مارس 2016، 9:34م UTC](https://meta.discourse.org/t/improving-our-unsubscribe-functionality/41448/16 "2016-03-23T21:34:08Z")

</div>

I agree with @calmh

Worrying about forwarded unsubscribe links is an imagineered problem that does not even happen at facebook scale.

I can imagineer solutions for it if needed:

- check that the IP of the person trying to unsubscribe matches the locations they previously logged in from, if not send a confirm

- if happens within N minutes from sending the link, send a confirm

But before building complex pyramids here, lets confirm this is a real problem. Aka have say 10 examples in the wild of a malicious “forward unsubscribe”

My gut tells me that since this not a problem for facebook or hundreds of thousands of sites that just let you plug in a random email and unsubscribe it with no confirm… its probably not going to be a problem here.

---

_[View the full topic](https://meta.discourse.org/t/improving-our-unsubscribe-functionality/41448)._