So when provide.autoinsurance@fhsbsh.com sends you an email that consists of nonsense text, a sketchy link, and an unsubscribe link you want to automatically follow the unsubscribe link?
Looking at my spam folder, how about hitting the unsubscribe link in email from the alias “100_free_spins” sent from top1.povertytrap.site? There’s an unsubscribe button at the bottom.
I’m slightly impressed how that spcammer is using the email “povertytrap” but I assume it’s just by chance they hacked that domain to send spam.
Virus scanners and other tools like google will fetch any urls in emails to check their target. So having a direct unsubscribe action behind GET of a link breaks your email list as Gmail will unsubscribe everyone
It’s a basic part of HTTP. If you follow a link, that’s a GET request. GET requests are supposed to be safe. A user may not have initiated the action if it’s a GET. If you want something that implies “yes, the user made an intentional choice to take action”, then use another verb, like POST.