Topics

moderated Bad link in confirmation email #bug


 

Curt,

If trying to join an unmoderated group...
...
However, if they personally know the group owner, perhaps unfortunate:
"Thanks, Mary. I still remember Vegas! ❤️"
Heh.

But even in an unmoderated group that allows non-member posts, a posting from a non-member is always held for moderation. So the "exposure" would be limited to the co-owners and moderators of the group -- unless one of them approved it... 🙄

Shal


 

We're very close to this stuff. We know that sending a note to a group is submitting a post.
Folks new to email forums may not know that.

"Anyone that follows the instructions won't have a problem. ;>)"
🙂 
People don't read thoroughly. Natural to click on that shiny link.
(And if using a phone, may not even see all of the message.)

"Some groups allow posts by non-members."
Good point -- a case I hadn't thought of.
However, doesn't that make this bug more serious?

If trying to join an unmoderated group...

1. If they hit the link instead of sending the special reply, they will think they have successfully joined the group when they have not. They won't get the group messages.

2. If they click that link, the text in their reply may be...
Merely noise:
"Thanks for letting me join this group." (which is now polluting Nextdoor.)
However, if they personally know the group owner, perhaps unfortunate:
"Thanks, Mary. I still remember Vegas! ❤️"

Lots of fun,
--cg

On Sat, Nov 7, 2020 at 09:04 AM, Curt Gowan wrote:
When I looked closely at the confirmation email, I saw that the link was 
mailto:Curt-Test@groups.io
-- in other words, causing the applicant to submit a post to a group that they are not yet a member of.
I don't believe this is a bug, nor should it be changed.  Some groups allow posts by non-members.  Anyone that follows the instructions won't have a problem. ;>)

Duane


 

Curt,

2. Got this reply
"Confirm Your Groups.io Subscription.
Thank you for your interest in Groups.io and the group
Curt-Test@groups.io To complete your
subscription, please reply to this email.
I think this results from a change Mark made some years ago, to use the group's posting address as its "name" or identification in the various notices.

I'm not really a fan of this change, in part for the reason you've encountered, but also just because it looks ugly to me.

Part of what motivated this change was the challenge of citing the "name" of a subgroup. Because they have two: the primary group (subdomain) name and the (sub)group name. Using the posting address combines them in a way that is superficially similar to a non-subgroup address:

name@groups.io
name@subdomain.groups.io

Myself, I would have dropped the groups.io part when used as a name (identifier), eliminating the confusion with an email address:

name
subdomain | name

Both of those are the forms used in the Your Groups list.

Shal


Duane
 

On Sat, Nov 7, 2020 at 09:04 AM, Curt Gowan wrote:
When I looked closely at the confirmation email, I saw that the link was 
mailto:Curt-Test@groups.io
-- in other words, causing the applicant to submit a post to a group that they are not yet a member of.
I don't believe this is a bug, nor should it be changed.  Some groups allow posts by non-members.  Anyone that follows the instructions won't have a problem. ;>)

Duane


 

1. Using a different gmail account from the account used to set up a test group called Curt-Test, I sent an note to Curt-Test+subscribe@groups.io 

2. Got this reply
"Confirm Your Groups.io Subscription. 
Thank you for your interest in Groups.io and the group Curt-Test@groups.io. To complete your subscription, please reply to this email.
If you did not request - or do not want - a subscription to this group, please accept our apologies and ignore this message.
Cheers,
The Groups.io Team"

3. Ignored the instructions and clicked on the link, which sent a note to the group.  

4. Got this response from Gmail:
"Delivery Status Notification (Failure)
Message not delivered
Your message couldn't be delivered to Curt-Test@groups.io because the remote server is misconfigured. See technical details below for more information.
The response from the remote server was:
510 5.1.1 Your email address, <redacted>@gmail.com, is not subscribed to that group. To subscribe, send an email to Curt-Test+subscribe@groups.io, or visit https://groups.io/g/Curt-Test "

5. When I ignored the link and sent a reply to the Confirmation email, it worked fine.
The address in the reply was tagged:
"Groups.io" <Curt-Test+subscribe+939633873206536861+5163825@groups.io>

Issue:
When I looked closely at the confirmation email, I saw that the link was 
mailto:Curt-Test@groups.io
-- in other words, causing the applicant to submit a post to a group that they are not yet a member of.

Suggested fix:
The mailto link provided in a confirmation email should have been 
Curt-Test+subscribe+939633873206536861+5163825@groups.io
-- i.e. matching the reply address built into the confirmation email.

Thanks!
--cg