Hacker News new | ask | show | jobs
by shapefrog 1431 days ago
I wonder if SPF / DKIM / DMARC have improved this.

Google domains doesnt make it quite as easy as other hosting providers, and to be honest if they were super serious about email abuse they should encourage every domain to use it.

2 comments

There is a marketing company that is constantly adding me to new spammy lists they are creating. They are using AWS SES / SendGrid / other reputable providers.

The emails all pass SPF/DKIM/DMARC and filing abuse reports seems to get me taken off the list I complained about but I quickly get added to a different one.

I am this close to auto-blocking anything from these large providers and switching to allow-listing the legitimate domains that can send me e-mail.

Unfortunately Google doesn't let you filter on arbitrary headers, otherwise at this point I'd delete everything with a List-Unsubscribe header.
Hmm, it looks like you can do this with Apple's Mail client.
really?

edited:

yeah, add two rules to macOS Mail app:

* delete From: “info@twitter.com” rule

* delete From: “twitter” rule

https://www.youtube.com/watch?v=HtB1OFNN4Ak

I feel this. Because of a Google Group I briefly followed one of my email addresses got incorrectly associated with my Kickstarter account on some marketing list somewhere and gets added to so much "legitimate" marketing lists for fly-by-night Kickstarters. It's really frustrating and the accident of it being a "wrong" email at least makes it somewhat easier to manage (though I worry if I ignore that mailbox too much I may miss the rare once in a few years important email to it).

For a while MailChimp was the only one of the major/reputable providers I trusted the Unsubscribe button on because they had a "I did not sign up for this button" that supposedly dinged the mailing list owner's reputation with them, but more than that would supposedly make it a bit tougher for the next mailing list to just dump that email in without a verification step or a cool off period.

That button disappeared recently and I guess MailChimp no longer cares either. Shame.

> For a while MailChimp was the only one of the major/reputable providers I trusted the Unsubscribe button on

Mailchimp is up there with Marketo and Sendgrid for me. Getting unsubscribed from something I never opted into… well I still haven't figured out how to do that.

SPF does not protect you from a pown smtp server (neither DKIM/DMARC, then SPF is "enough" for self-hosted smtp servers, and does force you to use DNS (the SMTP protocol works without DNS).