Gmail and Yahoo’s 2024 inbox protections and what they mean for email programs

#1

Post by pqvst » Wed, Jan 10, 2024, 1:39 AM UTC

Gmail and Yahoo’s 2024 inbox protections and what they mean for email programs
mailgun.com

Re: Gmail and Yahoo’s 2024 inbox protections and what they mean for email programs

#2

Post by pqvst » Wed, Jan 10, 2024, 1:39 AM UTC

From Q1 2024, Gmail and Yahoo will require senders to have SPF, DKIM, and DMARC. Also, spam complaints must be kept below 0.3%.

I recently added DMARC monitoring to some of my domains through CloudFlare.

Re: Gmail and Yahoo’s 2024 inbox protections and what they mean for email programs

#3

Post by sylware » Wed, Jan 10, 2024, 1:54 AM UTC

Abusive, SPF is plenty enough unless you cannot map the domain with the right IPs due to DNS trickery (rotation, etc), then you would need an IP agnostic way to do some checks, hence the cryptographic DNS based signature.

That said, with no-DNS email addresses, SPF comes for free (alice@[x.x.x.x] bob@[ipv6:...]).

Namely, if SPF does pass, cryptographic DNS based signature mecanisms are excessive and must not be used to score.

Re: Gmail and Yahoo’s 2024 inbox protections and what they mean for email programs

#4

Post by bagels » Wed, Jan 10, 2024, 3:09 AM UTC

What're the best resources for testing and configuring this stuff?

Re: Gmail and Yahoo’s 2024 inbox protections and what they mean for email programs

#5

Post by cassianoleal » Wed, Jan 10, 2024, 3:19 AM UTC

> These mandates will only affect bulk senders, defined by Google as senders with volumes of 5000 or more messages to Gmail addresses in one day.

This is not a requirement for a personal self-hosted email.

Re: Gmail and Yahoo’s 2024 inbox protections and what they mean for email programs

#6

Post by YPPH » Wed, Jan 10, 2024, 3:23 AM UTC

bagels wrote: post #4

What're the best resources for testing and configuring this stuff?

For testing, I find https://www.mail-tester.com/ helpful.

Re: Gmail and Yahoo’s 2024 inbox protections and what they mean for email programs

#7

Post by [deleted] » Wed, Jan 10, 2024, 3:24 AM UTC

pqvst wrote: post #2

From Q1 2024, Gmail and Yahoo will require senders to have SPF, DKIM, and DMARC . Also, spam complaints must be kept below 0.3%. I recently added DMARC monitoring to some of my domains through CloudFlare.

[deleted]

Re: Gmail and Yahoo’s 2024 inbox protections and what they mean for email programs

#8

Post by 1over137 » Wed, Jan 10, 2024, 3:27 AM UTC

bagels wrote: post #4

What're the best resources for testing and configuring this stuff?

For testing:

https://mxtoolbox.com/

For configuring:

https://www.cyber.gc.ca/en/guidance/implementation-guidance-...

Re: Gmail and Yahoo’s 2024 inbox protections and what they mean for email programs

#9

Post by ericpauley » Wed, Jan 10, 2024, 3:29 AM UTC

sylware wrote: post #3

Abusive, SPF is plenty enough unless you cannot map the domain with the right IPs due to DNS trickery (rotation, etc), then you would need an IP agnostic way to do some checks, hence the cryptographic DNS based signature. That said, with no-DNS email addresses, SPF comes for free (alice@[x.x.x.x] bob@[ipv6:...]). Namely, if SPF does pass, cryptographic DNS based signature mecanisms are excessive and must not be used…

IP addresses get reused, private keys don’t.

Aside from SPF being around first DKIM makes far more sense.

Re: Gmail and Yahoo’s 2024 inbox protections and what they mean for email programs

#10

Post by StayTrue » Wed, Jan 10, 2024, 3:29 AM UTC

cassianoleal wrote: post #5

> These mandates will only affect bulk senders, defined by Google as senders with volumes of 5000 or more messages to Gmail addresses in one day. This is not a requirement for a personal self-hosted email.

If your personal self-hosted email routes outbound messages through a smarthost, it could affect you.