I'm a strong advocate for double opt-in, a very specific email and permission verification process. The process works by, upon receiving an email address in a signup form, sending a confirmation email out to the address, and not considering the person a subscriber unless they positively respond to the email message. (Find more detail on that here.)
