Forum Discussion
ATP Safe Links are automatically unsubscribing users from email lists
Please complain to these br0ken lists, since:
"GET is for retrieving data. It should have no side effects, you should be able to request the same URL over and over harmlessly."
https://www.quora.com/HTTP-What-is-the-difference-between-GET-and-POST
"In particular, the convention has been established that the GET and HEAD methods SHOULD NOT have the significance of taking an action other than retrieval. These methods ought to be considered "safe". (...) Naturally, it is not possible to ensure that the server does not generate side-effects as a result of performing a GET request; in fact, some dynamic resources consider that a feature. The important distinction here is that the user did not request the side-effects, so therefore cannot be held accountable for them."
https://www.w3.org/Protocols/rfc2616/rfc2616-sec9.html
Thank you for the reply, but the "one-click unusubscribe" has been a feature in many lists for a very long time. I can ask the owners of those lists to talk to the list host about making changes, but some of these are very old lists that are not maintained with current technology (many of these are ancient academic lists). I did get one list host (Dada Mail) to remove the click to unsubscribe from the footer of messages being sent to our domain. Another host replied to tell me that they could not do remove or change the link.
So I know it's not Microsoft's fault, but from my customers' perspectives it is my department's fault for turning on a feature that has a negative side effect for many of them. The workaround many are using is to re-subscribe using a personal email address, which is less than ideal for many reasons. I did find that it looks like we can create a Transport rule to bypass safe links for specific IP addresses, so we will give that a try. Another user reported that it was triggering the satisfaction rating for their service desk software:
