My application sends mails containing an authentication token. The user which receives the mail clicks on a link and is directed to a webpage. The app recognizes him.
The problem is that sometimes the mail is sent to a mailing list instead of a personal address. Then several people come on the page and override each others’ actions.
There are 2 ways I think I could solve this :
- detect that the email address is a mailing list before I send the mail
- include the final recipient address in the link in the email.
Is any of the 2 possible ?
No.
The recipient can tell if the message came from a mailing list (if the list follows the right guidlines), but the sender can’t.
There is no way for the sender to modify the body of an email dynamically based on the final recipient.