After reading the linked article and thinking WTF-hows-that-supposed-to-work, then reading the linked article, and reading the linked article again, I think I found the big caveat: It relies on unstandardized undocumented behavior of some email clients. Specifically, it doesn't work in Gmail.<p>But the problem actually seems real, makes me glad that I am not an email marketer. If you provide a one-click unsubscribe to your users, you don't want them to give somebody else that link. Reading through this HN thread, I see two and a half other solutions mentioned:<p>(1a) Require users to enter their email address on unsubscribe.
I hate that one because frequently it's really hard to figure out at which of my email addresses the message first arrived.<p>(1b) Require users to confirm the unsubscribe
The better version of the unsubscribe forms from alternative (1) have the email address pre-filled, which wouldn't stop someone who knows what they are doing from unsubscribing others. But it gives those unsubscribing others unintentionally a hint about how they ended up with that message.<p>(2) Send an email confirmation after unsubscribe
This way you can just re-subscribe if one of your friends unsubscribed you. Looks like some people in the discussion below like this approach, others hate it.<p>If I had to pick, I'd probably chose (2) because that's the only way of making sure an accidentally unsubscribed user notices what happened.