News for hackers. Stuff that matters.

A comment on How does the Gmail unsubscribe button work?. Parent comment

Re:How does the Gmail unsubscribe button work? by BGZq7 on Friday May 29, 2020 @03:34PM (#23354520)
> If they use a reputable bulk mailing service instead of using their first-party domain then they are indistinguishable from a phishing attack.

With most bulk mailing services, the message will come from the "first-party domain". They will have configured that service as a legitimate sender for the domain via SPF/DKIM DNS records.

[ Parent | on HN ]
Re:How does the Gmail unsubscribe button work? by inetknght on Friday May 29, 2020 @04:12PM (#23354926)
> With most bulk mailing services, the message will come from the "first-party domain". They will have configured that service as a legitimate sender for the domain via SPF/DKIM DNS records.

It's not just the from:[email protected] that I'm talking about. If the unsubscribe link does not also go to firstparty.com, then it's still indistinguishable from phishing.

[ Parent | on HN ]