Hacker News new | past | comments | ask | show | jobs | submit login

That page has to be publicly accessible. It is sent to users without Facebook accounts. It doesn't need to be indexed, but it's not the huge bug people are making it out to be. It's a tiny bug.



I understand that the page has to be public, but why include the email address there? The person who received the link knows what email address it applies to. Every opt out/unsubscribe page I've used didn't display my email.


> The person who received the link knows what email address it applies to.

No they don't. Plenty of people have multiple email addresses forward to one account. Showing the email address helps, and it's harmless unless people post the link somewhere else on the internet.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: