The values currently are:

Title: Skip email verification (strongly discouraged)

Description: Anonymous users are normally required to validate their email address prior to subscribing to a newsletter or changing their subscription details. Skipping this confirmation results in an immediate subscription of an email address to the newsletter without obtaining prior consent from the person who this email address belongs to. SECURITY NOTICE: With this setting enabled, any anonymous user can subscribe or unsubscribe any email address.

The anonymous user can now only subscribe, not unsubscribe, so it's less bad. Single-opt-in is used in real world sites, so perhaps we should be less strongly discouraging.

Comments

AdamPS created an issue. See original summary.

adamps’s picture

Title: Fix title/description for simplenews_verification setting » Fix title/description for subscription.skip_verification setting
Status: Active » Needs review
StatusFileSize
new1.46 KB
adamps’s picture

Status: Needs review » Fixed

  • AdamPS committed 5513e11 on 3.x
    Issue #3246879 by AdamPS: Fix title/description for subscription....

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.