Just like we enforce basic security and ethical standards, such as:
👾 no tracking pixels
📩 no open mail relays (do those even still exist?)
☢️ no shady analytics URLs that disguise the original destination and can’t be distinguished from phishing-urls.

we should also adopt the following rule:
💚 do not send any additional emails if an initial subscription has not yet been verified

Why? Read the article:

#email #Newsletter #subscription #subscriptionbombing

https://bytemash.net/posts/subscription-bombing-your-signup-form-is-a-weapon/

Your sign-up form is a weapon | Bytemash

How bots used our sign-up and forgot password pages to bomb real people's inboxes, and what we did to stop it. A practical guide to subscription bombing for founders and developers who think CAPTCHA is an "I'll do it later" task.

Your sign-up form is a weapon | Bytemash

How bots used our sign-up and forgot password pages to bomb real people's inboxes, and what we did to stop it. A practical guide to subscription bombing for founders and developers who think CAPTCHA is an "I'll do it later" task.