So, that means I shouldn't have to login to my account to unsubscribe, correct? I find this annoying as I tend to click on the unsubscribe link from my phone, and not have the login details with me. I've seen several prominent companies that do this, including Mint earlier today.
The links do not need to be encoded -- they are allowed to ask for your email address -- but they can't ask for much else. And definitely not a username/password.
Funny, even big sites like LinkedIn break this. Is there some exception to some types of mail, like bulk mail received after signing up with a service?
