Does anyone know if this will stop NGP Van emails (seems to be dem party platform). I cannot get off their mailing lists - they seem to resell the email constantly. I've probably unsubscribed from NGP emails 50+ times. It's crazy. How are they not entirely blocked?
Gmail, Yahoo announce new 2024 authentication requirements for bulk senders
131–140 of 420 posts
Re: Gmail, Yahoo announce new 2024 authentication requirements for bulk senders
#132This might be good news, but as it comes from Google and involves email centralisation, I’m sceptical. At MailPace we already enforce DKIM, it’s pretty basic stuff. But list-unsubscribe is optional for our senders. We can make this a requirement and manage lists for senders who don’t / can’t implement a webhook to handle it (we already default to blocking resends to emails that hard bounce). However I am curious how…
Re: Gmail, Yahoo announce new 2024 authentication requirements for bulk senders
#133Earlier quoted context omitted.
Wrong address is one reason. For example, I receive transactional emails from a US-based ISP for someone else and the only way to unsubscribe is calling their customer service line. I’m not even in the same country.
Exactly, seriously -- I get monthly+ e-mails from a gym and a car dealership and some golf course because somebody else put in my e-mail. I contacted the customer support for all of them and they said they can't do anything about it. To change the customer's e-mail address, I need to prove I'm the customer, and obviously I have no idea who they are. So I gave up and implemented a Gmail filter in the end, but I defini…
I have in the past had very good data on how often a russian guy got a haircut.
Re: Gmail, Yahoo announce new 2024 authentication requirements for bulk senders
#134Earlier quoted context omitted.
"open models/blacklists don't come anywhere close to Gmail's capabilities" I disagree with you. I use Postfix with rspamd plugged into it for my personal email account. I get way more spam to my gmail than I do to my personal account, and I sign up to everything with my personal account. rspam also dkim signs my emails when I send them etc, verifies SPF/DKIM/DMARC on recipet etc. Now to counter that - I am a TINY mai…
FWIW, this would make a great blog post (or Show HN) with details! "I run my own mail server and get better spam results than Gmail"
rspamd is very, very impressive. I guess most of the hard work I've put into it is adding some of the not-turned-on-by-default things, like Pyzor and Razor. Also adding some other RBLs that weren't included by default (I spent a lot of time personally researching them and only picking ones that I believed to be of high value) The other big thing that I think is important is the RBL whitelists - DNSWL.org and HostKarma have a whitelist as well.
About one a week I spend 10-15 minutes looking at the logs of what it's accepted/rejected during the week to see if I can spot any obvious mistakes - it's pretty rare. If I do spot something I make config changes to address it. That said there's been months before where I haven't done this and none of the users of my platform have complained about spam (or missing email)
rspamd really is that amazing. I don't understand why more people don't scream it's praises from the rooftops.
Re: Gmail, Yahoo announce new 2024 authentication requirements for bulk senders
#135Hijacking the thread: I do some "bulk" sending for a 501(c)3 I volunteer for. I include unsubscribe links that go to a form with a submit button (because I want the unsubscribe to be a POST request). Each link has a random opaque identifier in the query string. Something like: hxxp://example.com/unsubscribe?id=abcd1234 A couple years ago I noticed that MSFT IPs hitting my unsubscribe links with invalid identifiers on…
In a previous life, we prevented the GET url problem by having a javascript POST and forward to a secondary URL. This allows everything to be "one click" (which honestly is a good thing) but prevents crawlers from accidentally triggering the unsubscribe. Not sure this still works today and obviously this is not legal advice.
Re: Gmail, Yahoo announce new 2024 authentication requirements for bulk senders
#136Earlier quoted context omitted.
FWIW, this would make a great blog post (or Show HN) with details! "I run my own mail server and get better spam results than Gmail"
I think that's pretty standard for everybody who runs its own mail server (like "shared webhosting"-running even). Owning your mail should also be standard for everybody in tech, you don't want to rely on Google for something that important.
Using Postfix+Rspamd gave me good insight into SPF, DKIM and DMARC and how to use them effectively.
Re: Gmail, Yahoo announce new 2024 authentication requirements for bulk senders
#137This might be good news, but as it comes from Google and involves email centralisation, I’m sceptical. At MailPace we already enforce DKIM, it’s pretty basic stuff. But list-unsubscribe is optional for our senders. We can make this a requirement and manage lists for senders who don’t / can’t implement a webhook to handle it (we already default to blocking resends to emails that hard bounce). However I am curious how…
Why is list-unsubscribe is optional for your senders?
Also it requires senders to actually implement it, which is not possible to confirm. Although we could add a catch all service that does this automatically, which I think we'll do.
Re: Gmail, Yahoo announce new 2024 authentication requirements for bulk senders
#138We should all stop using email providers who are known to massively compromise our privacy, build profiles of our online activities, manipulate us through ads, pass lots (or all) information to the government, and consolidate ownership of too much of Internet communications and activity.
Specifically, we should stop using GMail (and Yahoo), and encourage our friends to leave that email service as well. There are plenty of fine alternatives.
Re: Gmail, Yahoo announce new 2024 authentication requirements for bulk senders
#139Oh fun so basically no one will be able to setup their own email servers by themselves anymore. Antispam is killing the open internet now.
I mean... No? You can set up your own mail server all you want, it's just that few people will take your mail. Just make friends with other people who hate managed mail companies, you'll be able to email them just fine.
Imagine you live in an apartheid state and the people in power say: “White people will now refuse mail coming directly from black people. If black people want their mail to be received, they are required to send it through a trusted white liaison. If you're black and you don't like it, just make friends with other blacks and the tiny minority of whites who will accept mail from undesirables like you."
The above analogy is exaggerated of course, but I think there is a fundamental truth for it: large tech companies like Google have cornered the market by offering free solutions, and now they are imposing an apartheid system where mail sent through big companies is given priority over mail sent by real people who run their own email system.
(Personally, I've disabled all spam filters in Gmail since I've noticed that Gmail is likely to filter out legitimate email while the amount of spam I receive is actually very low.)
Re: Gmail, Yahoo announce new 2024 authentication requirements for bulk senders
#140Earlier quoted context omitted.
Wrong address is one reason. For example, I receive transactional emails from a US-based ISP for someone else and the only way to unsubscribe is calling their customer service line. I’m not even in the same country.
Exactly, seriously -- I get monthly+ e-mails from a gym and a car dealership and some golf course because somebody else put in my e-mail. I contacted the customer support for all of them and they said they can't do anything about it. To change the customer's e-mail address, I need to prove I'm the customer, and obviously I have no idea who they are. So I gave up and implemented a Gmail filter in the end, but I defini…