A normal footer link is useful, but it does not by itself satisfy the mailbox-provider one-click requirement. RFC 8058 uses message headers and an HTTPS POST action so a recipient can leave a promotional list without another confirmation step.
1. Add both required headers
The message needs a List-Unsubscribe header containing an HTTPS URL and a List-Unsubscribe-Post header with the one-click instruction. The URL should contain an opaque, recipient-specific token rather than a plain email address.
2. Handle the POST safely
Accept the provider POST without requiring a login, record the opt-out idempotently and return a successful response. Do not redirect the POST to a preference page or require the recipient to click a second confirmation.
3. Keep the visible footer link
Continue to include a clear human-readable unsubscribe link in the message body. It can open a preference centre, while the header endpoint performs the immediate one-click action.
4. Connect every suppression source
The endpoint, footer form, manual support request, complaint feed and hard-bounce processor should write to one suppression system that is checked before every promotional send.
Header example
List-Unsubscribe: <https://example.com/unsubscribe/opaque-token>
List-Unsubscribe-Post: List-Unsubscribe=One-ClickImplementation checklist
- HTTPS URL uses an opaque token
- POST works without login
- Action is idempotent
- Suppression applies before the next send
- Visible unsubscribe remains in the body
Primary references
Share the sending domain, route, message purpose, expected volume and a recent received-message header.
Request technical review