Re:How does the Gmail unsubscribe button work?
by 0x0 on Friday May 29, 2020 @12:00PM
(#23351581)
If I get spam mails on lists I never signed up for, I either hunt down the X-Abuse header and report there (if they use a reputable bulk mailing service), otherwise I just paste the entire email on members.spamcop.net
[ Parent
| on HN ]
Re:How does the Gmail unsubscribe button work?
by inetknght on Friday May 29, 2020 @12:50PM
(#23352342)
> if they use a reputable bulk mailing service
If they use a reputable bulk mailing service instead of using their first-party domain then they are indistinguishable from a phishing attack.
> If they use a reputable bulk mailing service instead of using their first-party domain then they are indistinguishable from a phishing attack.
With most bulk mailing services, the message will come from the "first-party domain". They will have configured that service as a legitimate sender for the domain via SPF/DKIM DNS records.
Re:How does the Gmail unsubscribe button work?
by inetknght on Friday May 29, 2020 @04:12PM
(#23354926)
> With most bulk mailing services, the message will come from the "first-party domain". They will have configured that service as a legitimate sender for the domain via SPF/DKIM DNS records.
It's not just the from:[email protected] that I'm talking about. If the unsubscribe link does not also go to firstparty.com, then it's still indistinguishable from phishing.
Re:How does the Gmail unsubscribe button work?
by judge2020 on Friday May 29, 2020 @04:08PM
(#23354892)
No, a reputable bulk mailing service can still send from their customers' principal domains with spf/dkim set up to include that service's info.
Re:How does the Gmail unsubscribe button work?
by inetknght on Friday May 29, 2020 @04:11PM
(#23354912)
> No, a reputable bulk mailing service can still send from their customers' principal domains with spf/dkim set up to include that service's info.
Tell that to the links in the email that go to the reputable service's click aggregation service.