News for hackers. Stuff that matters.
Re:A deep dive into email deliverability in 2024 by ttul on Sunday March 31, 2024 @07:14PM (#39889102)
This change was necessary and long overdue. Requiring domain owners who send significant volumes of email to properly sign their messages allows receivers to more clearly delineate good from bad based on domain reputation rather than IP address reputation.

As more domains send email through shared IP space on transactional and marketing services, having the ability to attach reputation reliably to the sender domain is incredibly helpful in reducing abuse.

Re:A deep dive into email deliverability in 2024 by cj on Sunday March 31, 2024 @08:12PM (#39889509)
As a sys admin, what do you do when you see 5% of your email hitting spam because the recipient’s Office365 mail server is misconfigured?

Agreed it’s a net positive, but it kills me when the reason emails land in spam is misconfiguration at the recipient’s end. (Like forwarding emails which breaks SPF)

Re:A deep dive into email deliverability in 2024 by brightball on Sunday March 31, 2024 @08:28PM (#39889587)
As long as DKIM is configured correctly, it shouldn't matter.
Re:A deep dive into email deliverability in 2024 by BeFlatXIII on Monday April 01, 2024 @08:54AM (#39893648)
My employer has had massive issues with this recently. Lots of office chatter from HR about needing to call candidates b/c the response rate is down this year due to spam folders eating the offers.
Re:A deep dive into email deliverability in 2024 by adrian_b on Sunday March 31, 2024 @08:09PM (#39889495)
The condition about "significant volumes" is not true.

Google states that the new requirements are mandatory only when you send at least 5000 messages per day.

This is a lie. I send at most a few messages per day and usually less than one per day was towards a gmail account and I had implemented a part of the requirements, but not all of them.

Nevertheless, Google has started to reject my messages, so I was forced to waste time with the implementation of all requirements, even if they are somewhat redundant.

Re:A deep dive into email deliverability in 2024 by skrause on Sunday March 31, 2024 @08:47PM (#39889720)
Maybe someone else sent 5000 mails to Gmail users using your unauthenticated domain.
Re:A deep dive into email deliverability in 2024 by bbarnett on Monday April 01, 2024 @02:05AM (#39891300)
Re:A deep dive into email deliverability in 2024 by adrian_b on Monday April 01, 2024 @03:40AM (#39891695)
That would not have been possible, with the already existing checks.

While the individual messages were not yet signed, Gmail should have already rejected any message claiming to be from my domain that was not sent by my own server.

Re:A deep dive into email deliverability in 2024 by denton-scratch on Monday April 01, 2024 @03:59AM (#39891768)
My domain also sends no more than 10 messages a day. The domain is correctly-configured with SPF, DKIM and DMARC.

At the beginning of March, I started getting temporary rejections from gmail. Not all of my outgoing messages, maybe 1 in 10. Most of these messages were to one individual, to whom I've been sending for years. My domain has existed continously since 2002, and has never sent spam. The rejection message was startling: words to the effect of "Your message has been rejected because of the awful reputation of the sending domain". The reputation of my domain is spotless, according to various testing tools.

There have been no new rejections in the last two weeks.

According to TFA, Google started rejecting a proportion of mail from bulk senders in February. I wonder if I got caught up in some half-baked roll-out of this new (old) policy.

Re:A deep dive into email deliverability in 2024 by drdebug on Monday April 01, 2024 @05:17AM (#39892128)
Same here with 20+ years old mail service on the same domain that has never sent spam with correctly configured DNS SPF DKIM DMARC, getting gmail rejections. I noticed a significant improvement after linking the domain to my google account https://support.google.com/mail/answer/9981691
Re:A deep dive into email deliverability in 2024 by jeromegv on Monday April 01, 2024 @08:41AM (#39893533)
Did you link your domain to Google Webmaster tools? It will let you know what your domain reputation is.
Re:A deep dive into email deliverability in 2024 by denton-scratch on Monday April 01, 2024 @09:17AM (#39893865)
No, I did not. I barely ever use Google services of any kind.

My "domain reputation" should mean something like "the consensus of multiple reputation services", where those reputation services are reasonably open about how they score. It shouldn't mean "the completely opaque opinion of a single, hyper-dominant, secretive provider with all kinds of conflicts of interest".

Re:A deep dive into email deliverability in 2024 by janosdebugs on Monday April 01, 2024 @08:12AM (#39893283)
I can confirm this, I have a mail server with extremely low, non-bulk mail traffic and without SPF/DKIM/DMARC nothing works. Even with, Gmail started rejecting mail (probably noisy neighbor), so the only way around that was to use the little-advertized relay service in the paid Google Workspace when sending towards gmail or workspace domains.
Re:A deep dive into email deliverability in 2024 by sdfhbdf on Monday April 01, 2024 @12:05PM (#39895674)
It also says that you only need to hit this limit once and you’re forever on that list. Also domain is considered as the canonical domain, the part right before the TLD. Subdomains are counted together with the apex domain.
Re:A deep dive into email deliverability in 2024 by ttul on Tuesday April 02, 2024 @01:08PM (#39908175)
The 5,000 message limit adds _extra_ requirements for senders; ALL senders, regardless of volume, must adhere to these standards:

Starting February 1, 2024, all email senders who send email to Gmail accounts must meet the requirements in this section.

- Set up SPF or DKIM email authentication for your sending domains.

- Ensure that sending domains or IPs have valid forward and reverse DNS records, also referred to as PTR records. Learn more

- Use a TLS connection for transmitting email. For steps to set up TLS in Google Workspace, visit Require a secure connection for email.

- Keep spam rates reported in Postmaster Tools below 0.3%. Learn more about spam rates

- Format messages according to the Internet Message Format standard, RFC 5322.

- Don’t impersonate Gmail From: headers. Gmail will begin using a DMARC quarantine enforcement policy, and impersonating Gmail From: headers might impact your email delivery.

- If you manage a forwarding service, including mailing lists or inbound gateways, add ARC headers to outgoing email. ARC headers indicate the message was forwarded and identify you as the forwarder. Mailing list senders should also add a List-id: header, which specifies the mailing list, to outgoing messages.

https://apps.google.com/supportwidget/articlehome?hl=en&arti...

Re:A deep dive into email deliverability in 2024 by xoneill on Sunday March 31, 2024 @07:23PM (#39889193)
Agreed, this is the upside for sure. Despite frustrations, I'm hoping this cleans things up.
Re:A deep dive into email deliverability in 2024 by ozim on Monday April 01, 2024 @08:30AM (#39893435)
We also slowly but surely are moving towards IPv6 which will make reputation based on IP somewhat useless when I can have as many new IP addresses as I want. They would have to make all newly seen IPv6 addresses not trusted by default when bad actor could send each email from different IPv6 address.