>> As in once you confirmed one subscription the next one doesn't ask >> anymore? Sort of greylisting? >> >> Sounds good. > > It should always ask for confirmation unless someone has specifically > made the decision that they don't want to have to opt-in. Maybe it should honour subscription requests without confirmation if request is GPG-signed by the key with uid equal to address being subscribed.