If you have my email then stop asking me to sign up each time you send me a marketing email with a CTA. Just embed my email into it...
Hey all,
Is it just me or do you ya'll also get annoyed when you see a cool marketing email and be like "ah, I would really like this" but then when you click on it, it will ask you to log back in or sign up.
Why aren't devs just using magic links for such situations? Literally can bypass that friction point.
I even took one step ahead and build it. If anyone is planning on using it, this is what I mean: https://www.ezid.io/outbound-email-marketing/?channel=indiehackers
Wouldnt that be insecure? The token for a magic link should have a really short expiry time while a marketing email might be read weeks after. So you would have to make the token last very long and then it easier to brute force.
you raised a great point but the idea behind it was to keep the token alive only for a few days and not weeks. Ive noticed most "claim your discount" emails are usually have a time line in them (3-5 days) and once this time runs out, we can expire the token.
We actually had mentioned the same security issues you mentioned here but with the exception of keeping it alive for a few days for this purpose
https://www.ezid.io/resource/are-magic-links-secure
Another issue could be that people don't know it is a magic link and they might copy the link and post to twitter etc. Low probability maybe but just feel like it's not expected behaviour.
that is something I definitely did not think off. But yea, even though its low probability, its something to keep in mind while building it