[Fluxbox-users] [fluxbox-users] Is SourceForge asking for confirmation on fluxbox-users mailing list?

[Javier]

I'm getting an email from "***@slashdotmedia.com", and part of the
message indicates:

++++
We are contacting you to confirm you are still interested in receiving
emails from this SourceForge project list. If you do not confirm your
subscription by June 29th, you will be unsubscribed from the above
mailing list.
++++

They are asking to confirm here:

https://sourceforge.net/mailman/reconfirm?confirm=<hash_number>&email=<my_email_addres>

Seems pretty valid if you ask me, but I better ask...

Is it OK to confirm through that link they provide?

[Thomas Lübking]

Got the same mail two days ago.
Looking at the header is passed DKIM for slashdotmedia.com and
amazonses.com (sourceforge and slashdot belong to amazon, "amazonses.com" is
indeed registered for amazon.

Looks weird but legit. Since the risk is a compromised sf.net server I
usually have such mail represented after a couple of days to delay
action, assuming the server isn't comprmised for a week ;-)

Cheers,
Thomas