Encode the fixed POST body without changing the target
04The same key/value pair can be sent as an allowed URL-encoded form or as recommended multipart form data. Body encoding does not change the HTTPS URI.
Delimiter lines add two hyphens to the parameter value. The part name and One-Click value encode exactly the same action; the closing delimiter adds two terminal hyphens.
Source for this drawing: RFC 8058 · Read RFC section 3.2 ↗
New to this? Start hereA quick picture + helpful background
A message needs an address.
Think of a packet as a small addressed envelope. Devices pass it onward; transport protocols decide what delivery promises an application gets.
Helpful first, if these ideas are unfamiliar
These pictures are analogies to help you learn. The linked RFC explains the actual rules.
Terms in this drawing
Related RFCs and changes
“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.
Encode one fixed form field and keep the advertised target intact.
- The receiver performs an HTTPS POST to the HTTPS URI in List-Unsubscribe, with the List-Unsubscribe-Post key/value pair as its body.
- The content SHOULD use multipart/form-data; application/x-www-form-urlencoded MAY be used. The single field is List-Unsubscribe with value One-Click, not arbitrary extra form arguments.
- Verified errata5117/8927 correct the multipart boundary parameter to -FormBoundaryjWmhtjORrn. Verified erratum5559 removes the stray equals sign in the multipart request target. A delimiter is two hyphens plus the boundary value.
Public examples adapted from§8.1/§8.3 with verified errata. Header anatomy is schematic, not a full HTTP transcript. The URL-encoded body is26 ASCII octets. The illustrated multipart body uses CRLF between its lines and no trailing CRLF after the closing delimiter, yielding124 octets as in the RFC; rejected erratum5558 is not an adopted correction. This is not a full multipart tutorial.
Read the RFC section ↗