> most custom-built mailing list systems don't have it, requiring to log in or just not working

Does this violate CAN-SPAM?

https://www.ftc.gov/tips-advice/business-center/guidance/can...

> You can’t ... make the recipient take any step other than sending a reply email or visiting a single page on an Internet website as a condition for honoring an opt-out request

It's sometimes grey. One example I can give is Expedia, which provides me with a monthly 'Your [Month] Statement is Ready'-type of thing, even though I've maybe used the service once in my life to buy airplane tickets. You can't unsubscribe since it's not 'marketing' and e-mailing support didn't help either. Yet, it's marketing, because they offer promotional links ("earn free yadda yadda") and has Citi advertising below it.

Another one is 'Oh, wow, you've been getting some profile views!' that LinkedIn and other like to do. That's indirect promotion of their services. Couched as a reminder.

Today, after not logging into Facebook for a while, received an e-mail that someone commented on their profiles. Another of the same.

It can be argued that these is all a form of promotion, but this would take a less-business-friendly political climate to accomplish, if you ask me.

LinkedIn has been one of the most infuriating CAN-SPAM violators for years. So many startups do too. "Growth hacking" is probably a net negative to society based on all the spam it produces.

Facebook themselves require you to log in to unsubscribe from emails. If you've disabled or deleted your account, you still get spammed daily, and there's quite literally zero way to unsubscribe.

If you’re on Gmail, you should mark it as spam, that’s what it is. You’ll also end up blocking that address.

If you run your own email server, black hole the Facebook.com domain.

I think most of Facebook's email comes from facebookmail.com.

"if people start to complain about it, we'll just say we didn't know and that we're sorry"

-- my former boss

CAN-SPAM only applies to promotional/marketing emails.

One workaround is to use disposable email addresses when signing up to anything online, like https://forward.cat

As I run my own mail server, what I do is always creating an alias, usually named after the website I subscribe. Like [email protected] for example.

This way I can stop unwanted mail if unsubscribe does'nt work by deleting the alias.

It also help to see who is selling your email.

For example, some years ago, I had the problem with bitdefender, as I subscribed as a reseller (!). I explained what I thought about it to my sell representative, who couldn't find a decent explanation. And stop selling their product. And destroy the alias.

Why not spamdecoy.net? It does the same thing and you never give your real email to anyone (though forward cat is open source so it's probably ok), and you don't have to set up anything before you use the temporary email.

> (though forward cat is open source so it's probably ok)

Curious about this - how can you have an 'open-source' service? I'm not compiling or running the software, and I have no idea what their software is actually doing because there's no way to verify that it's the same as what's been open-sourced...

tempmail.de (http://tempmail.de/) do not ask you for your real email adress