> From: Kee Hinckley <nazgul@somewhere.com>
...
4. If User does not not confirm by either replying (From/Reply-To) or
clicking on the confirmation url....
Clicking on confirmation URLs turns out to be a bad idea. Anything
Damned if you do, damned if you don't. I agree that the email reply
offers more proof. But then again, I've seen one confirmed-opt-in
system treated a *bounce* as confirmation (hey, the subject matched
:-). And then of course, there's Microsoft's vacation messages,
which go to the wrong address. And our challenge/response friend
from yesterday would apparently have automatically confirmed any list
anyone sent him a confirmation for.