News for hackers. Stuff that matters.
Re:DMARC required by Gmail and Yahoo from Feb 2024 by boplicity on Wednesday January 10, 2024 @10:14AM (#38939756)
> you probably should have unsubscribe links

They're not requiring just unsubscribe links. They're specifically requiring "one-click" unsubscribe links that can accept a POST request for unsubscribing. This allows their software to have an unsubscribe button that doesn't require the user to leave their software.

This is the RFC that has to be complied with:

https://datatracker.ietf.org/doc/html/rfc8058

Note, that this is not easy for many people using legacy software. It's a major change. I wouldn't be surprised if this requirement gets delayed multiple times.

Re:DMARC required by Gmail and Yahoo from Feb 2024 by eli on Wednesday January 10, 2024 @10:18AM (#38939801)
Yes, that's the List-Unsubscribe header and it doesn't require a POST request.

Email deliverability has always meant staying on top of changing requirements.

Re:DMARC required by Gmail and Yahoo from Feb 2024 by boplicity on Wednesday January 10, 2024 @10:47AM (#38939877)
No -- this actually expands on the List-Unsubscribe header, and adds a POST request header for one-click unsubscribe.

From the RFC:

> This document addresses this part of the problem, with an HTTPS POST action

Look at the examples in the RFC for a clear description.

Re:DMARC required by Gmail and Yahoo from Feb 2024 by eli on Wednesday January 10, 2024 @11:10AM (#38940125)
Ah, my mistake. The MAILTO: style unsubscribes were a bit of a pain to deal with anyway.
Re:DMARC required by Gmail and Yahoo from Feb 2024 by callalex on Wednesday January 10, 2024 @01:22PM (#38941498)
>this is not easy for many people using legacy software. It's a major change.

That’s fine, I never wanted to receive messages from those people in the first place.

Re:DMARC required by Gmail and Yahoo from Feb 2024 by dexwiz on Wednesday January 10, 2024 @01:32PM (#38941618)
No, that is for generating the Unsubscribe buttons in the email client itself. They also require a link in the body itself. From the google doc:

  Marketing messages and subscribed messages must support one-click unsubscribe, and include a clearly visible unsubscribe link in the message body.