Hope this helps someone.
Over the weekend (few days ago) tried to signup/register to the phplist.org site.
The confirmation email provides a confirmation URL.
Selecting the confirmation URL generates the confirmation page, which expects a “confirmation/validation” key. This key is not listed in the email, but the key is in the URL!!! if a user does a copy/paste of the long string of alpha-numeric chars in the URL
like >>>>> C4Q4HHZuSULMQJJbBN6VpGHUKWiuUleo
and inserts this in the activation key dialog, the app validates the user and all is good.
Appears to be an err in the logic somewhere!