> If they use a reputable bulk mailing service instead of using their first-party domain then they are indistinguishable from a phishing attack.
With most bulk mailing services, the message will come from the "first-party domain". They will have configured that service as a legitimate sender for the domain via SPF/DKIM DNS records.
Re:How does the Gmail unsubscribe button work?
by inetknght on Friday May 29, 2020 @04:12PM
(#23354926)
> With most bulk mailing services, the message will come from the "first-party domain". They will have configured that service as a legitimate sender for the domain via SPF/DKIM DNS records.
It's not just the from:[email protected] that I'm talking about. If the unsubscribe link does not also go to firstparty.com, then it's still indistinguishable from phishing.
Re:How does the Gmail unsubscribe button work?
by judge2020 on Friday May 29, 2020 @04:08PM
(#23354892)
No, a reputable bulk mailing service can still send from their customers' principal domains with spf/dkim set up to include that service's info.
Re:How does the Gmail unsubscribe button work?
by inetknght on Friday May 29, 2020 @04:11PM
(#23354912)
> No, a reputable bulk mailing service can still send from their customers' principal domains with spf/dkim set up to include that service's info.
Tell that to the links in the email that go to the reputable service's click aggregation service.
If they use a reputable bulk mailing service instead of using their first-party domain then they are indistinguishable from a phishing attack.