Comment on PSA on privuhcy
dan@upvote.au 4 weeks ago
This is kinda true but also kinda fear mongering. UTM parameters are just to track where you clicked the link from, and don’t contain anything about you personally.
Comment on PSA on privuhcy
dan@upvote.au 4 weeks ago
This is kinda true but also kinda fear mongering. UTM parameters are just to track where you clicked the link from, and don’t contain anything about you personally.
ericatty@infosec.pub 4 weeks ago
As someone who has link tracking in our business, yes, some of the stuff after the ? isn’t nefarious tracking, like the utm mentioned above.
All the “list-unsubscribe” options you may have noticed starting about a year ago, are actually required to be there for any company that sends out any kind of email newsletter over a certain threshold. (Lists around 5k or more)
If the unsubscribe links aren’t there, with the required url-encoded parameters (along with some other requirements with DNS) the email will not be delivered to any of the majors (google, yahoo/aol, hotmail, big ISPs) and we get blocked.
The unsubscribe parameters are being tracked, yes, but we have to have them so we can unsubscribe you “in one click” We are not allowed to require you to sign in to unsubscribe you. (Not that we ever did that, but now there must be a one-click option.)
(We used to just be two clicks to unsubscribe off an encoded link. Click -> this you? If yes, click -> you are now unsubscribed. Or sign-in and manage subscriptions without an encoded link.)
Again, the point is that not all url encoded tracking is nefarious. Some of it is now required to try and minimize spam and nefarious emails.
Source: …postmark-testing.com/…/2024-gmail-yahoo-email-re…