Re: [dispatch] draft-levine-herkula-oneclick, additional security consideration

[Roland Turner <[e-mail]>]

On 12/01/2016 10:07 PM, John Levine wrote:

>> unsubscribe button (in the dialogue box that could pop up if the user
>> clicked This is Spam), they established three criteria:
>>
>>   * that a List-Unsubscribe: header was present
>>   * that the message authenticated, and
>>   * that the sender was in good standing in terms of its complaint rate.
>>
>> It may be argued, with some strength, that the third item really makes
>> no difference, but it would appear to be a relevant consideration to
>> address in Security Considerations, and perhaps an option to suggest.
> That's a policy issue.  Some mailers care, some don't.

I agree, that is the nature of security considerations. Are you arguing 
for not including this concern and potential countermeasure?

- Roland