News for hackers. Stuff that matters.
Re:What's an SPF Record? by fogihujy on Wednesday February 10, 2021 @02:18AM (#26086428)
The sad reality is that you should expect to be delivered into the recipients' spam boxes until you have managed to convince Google/Microsoft/Yahoo that you're not a spammer.

As far as I can tell, it simply is not possible to buy a new domain, pay for a email service and have mails delivered straight into people's inboxes. After all, if you would be able to do that then so could the spammers.

Ramp up volumes slowly. Make sure the recipients actually want the mails you send, and for all that is holy, educate your users that the "Junk" and "Trashcan" buttons are two very different things. People who repeatedly mark your mails as spam need to be blacklisted, no matter if they're paying customers. Period.

Oh, and handle abuse complaints right away. Don't be afraid to tell people they're not supposed to mark your mails as spam and to explain the consequences.

Re:What's an SPF Record? by avereveard on Wednesday February 10, 2021 @02:59AM (#26086627)
> educate your users that the "Junk" and "Trashcan" buttons are two very different things.

we have 97% reputation on sendgrid, and the only mail we send are a) customer requested password reset and b) customer requested notification for completed workflow jobs.

I don't know who that 3% is, but it is enough to get sometime filtered and I don't think we can ever win this

Re:What's an SPF Record? by fogihujy on Wednesday February 10, 2021 @04:11AM (#26087026)
Sendgrid itself is a major source of spam, and simply using them can result in mails getting filtered. There are even Spamassassin rules (3rd party) that specifically add spam score to mails, if they are sent through Sendgrid.

The 3% may very well be ignorant users who are using the Junk button as a way to remove the mails from the inbox (yeah, people actually do that), but for good measure, things like signup forms and password reset forms really should be protected with a captcha, as any form able to send any form of email whatsoever will be abused by bots trying to send spam.

Re:What's an SPF Record? by cm2187 on Wednesday February 10, 2021 @05:01AM (#26087355)
> Sendgrid itself is a major source of spam

so is gmail by the way.

Re:What's an SPF Record? by fogihujy on Wednesday February 10, 2021 @05:05AM (#26087377)
Definitely, and so are most free email services. Try blocking Gmail, on the other hand, and your users will be somewhat upset. Sendgrid doesn't have that kind of weight behind them.
Re:What's an SPF Record? by cm2187 on Wednesday February 10, 2021 @06:26AM (#26087882)
Of course, but it very much a "do as I say, not as I do". i.e. google applies a zero tolerance policy to receiving spam from any domain, but is likely way above any absolute threshold they impose on incoming messages for the spam they emit.
Re:What's an SPF Record? by fogihujy on Wednesday February 10, 2021 @07:53AM (#26088450)
It is what it is.

I'm in favour of anti-trust action against Google and Microsoft for their outright anti-competitive anti-spam practices, but that's going to be a long and hard up-hill battle for anyone attempting it.

Meanwhile, the rest of us will have to accept things for what they are and deal with them as well as we can.

Re:What's an SPF Record? by avereveard on Wednesday February 10, 2021 @04:33AM (#26087178)
> password reset forms

well we do have a user existence checks

Re:What's an SPF Record? by fogihujy on Wednesday February 10, 2021 @05:04AM (#26087368)
Doesn't really help when people's initial reaction to unexpected mails is to press "Junk". A random spambot entering a user's email address in a random form is enough to trigger a complaint. It's ridiculous but it is what it is.
Re:What's an SPF Record? by chillfox on Wednesday February 10, 2021 @02:33AM (#26086508)
The biggest difference comes from actually owning the block of IP addresses that you use instead of renting them.