For those interested in testing their email for SPF, DKIM, and DMARC compliance or eager to learn about these mechanisms that enhance email security and prevent spoofing, check out https://learnDMARC.com . This is a site I developed to promote adoption and share knowledge. It includes a challenging quiz, tough even for professionals. I'd be keen to know your scores on the first attempt – honesty counts!
Gmail and Yahoo’s 2024 inbox protections and what they mean for email programs
161–170 of 279 posts
Re: Gmail and Yahoo’s 2024 inbox protections and what they mean for email programs
#162How are they counting the 5,000/day? Per sender email? IP?
Re: Gmail and Yahoo’s 2024 inbox protections and what they mean for email programs
#163Earlier quoted context omitted.
Google routinely flags my genuine AWS invoices as possibly dangerous, despite me routinely clicking the "this isn't dangerous, I know what it is" button. So yes, I think it's totally possible that engineers who build web crawlers can't build reliable email classifiers.
Or potentially a low-key sales tactic to push google cloud...?
Re: Gmail and Yahoo’s 2024 inbox protections and what they mean for email programs
#164Earlier quoted context omitted.
Its 5000/day for marketing, and if you are sending 5000 emails a day, you probably should have unsubscribe links. https://support.google.com/mail/answer/81126#requirements-5k You also need a link, not just list-unsubscribe, and it is specifically for marketing emails. In my experience, Google is pretty accurate in figuring out transactional versus marketing. They don't tell their heuristics, but you don't think engin…
Google routinely flags my genuine AWS invoices as possibly dangerous, despite me routinely clicking the "this isn't dangerous, I know what it is" button. So yes, I think it's totally possible that engineers who build web crawlers can't build reliable email classifiers.
Re: Gmail and Yahoo’s 2024 inbox protections and what they mean for email programs
#165Earlier quoted context omitted.
100% open rate on transactional emails feels too high to me. Something like an e-commerce purchase might kick off multiple emails (purchase made, shipped, arrived), none of which the user opens
Kicking off a chain of emails a user cannot easily opt out of could well be the sort of emails users want to lose. There probably should be a one-click 'stop emailing me' button, for this and future purchases. Which would be a support burden, yes.
Re: Gmail and Yahoo’s 2024 inbox protections and what they mean for email programs
#166How does this interact with transactional emails / 2FA / password resets? If 5000 people request a 2fa code in a month, I have to give them a unsubscribe header as well? Or magic login links? If I don't provide a list-unsubscribe header: do these emails then get blocked and noone can log in ? If I provide a list-unsubscribe header, what is the expected behaviour if they do click the Unsubscribe button? - tell them th…
Re: Gmail and Yahoo’s 2024 inbox protections and what they mean for email programs
#167Earlier quoted context omitted.
Maybe transactional emails don't need an unsubscribe link like marketing emails, but they do need a "not my account; please stop" link to avoid the spam button.
Why would you be receiving transactional emails for an account that isn't yours?
Re: Gmail and Yahoo’s 2024 inbox protections and what they mean for email programs
#168I have them blocked at the server level because of how much spam they were sending me. They clearly do zero enforcement of opt-in.
Re: Gmail and Yahoo’s 2024 inbox protections and what they mean for email programs
#169How does this interact with transactional emails / 2FA / password resets? If 5000 people request a 2fa code in a month, I have to give them a unsubscribe header as well? Or magic login links? If I don't provide a list-unsubscribe header: do these emails then get blocked and noone can log in ? If I provide a list-unsubscribe header, what is the expected behaviour if they do click the Unsubscribe button? - tell them th…
Its 5000/day for marketing, and if you are sending 5000 emails a day, you probably should have unsubscribe links. https://support.google.com/mail/answer/81126#requirements-5k You also need a link, not just list-unsubscribe, and it is specifically for marketing emails. In my experience, Google is pretty accurate in figuring out transactional versus marketing. They don't tell their heuristics, but you don't think engin…
They're not requiring just unsubscribe links. They're specifically requiring "one-click" unsubscribe links that can accept a POST request for unsubscribing. This allows their software to have an unsubscribe button that doesn't require the user to leave their software.
This is the RFC that has to be complied with:
https://datatracker.ietf.org/doc/html/rfc8058
Note, that this is not easy for many people using legacy software. It's a major change. I wouldn't be surprised if this requirement gets delayed multiple times.
Re: Gmail and Yahoo’s 2024 inbox protections and what they mean for email programs
#170As a self-hoster for over a decade, setting up SPF, DKIM, and DMARC are pretty much once-and-done and free, so there's pretty much no downside. I'd be shocked if most self-hosters haven't set these up long ago.