When someone subscribes to your KaiMail mailing list, they receive a confirmation email with a link that expires after 48 hours. If they do not click the link and press Confirm subscription within that window, the subscription is not completed.
The unconfirmed address is never added to your list. This is by design. A confirmation token that lives forever is a token that gets forwarded, archived, and clicked eight months later by somebody who has forgotten what it was.
Expiring tokens mean:
If a subscriber clicks an expired link, they will see a page telling them the confirmation has expired. They are not added to the list, and no welcome email is sent.
The subscriber can simply:
A fresh confirmation email with a new 48-hour link is sent automatically. They can then complete the confirmation flow.
The 48-hour window balances two concerns:
This is part of the same security model that requires a button press (not just a page load) to complete confirmation. Both measures protect against automated scanners and stale tokens.
Read more about the confirmation flow in the announcement post.