Hacker News new | ask | show | jobs
by milkshakes 4853 days ago
This is possibly in violation of CAN-SPAM: You can’t charge a fee, require the recipient to give you any personally identifying information beyond an email address, or make the recipient take any step other than sending a reply email or visiting a single page on an Internet website as a condition for honoring an opt-out request.[1]

[1] http://business.ftc.gov/documents/bus61-can-spam-act-complia...

4 comments

I don't see how that would stop what the grandparent was talking about.

Go to single page->enter email->unsubscribed

Uh, the section you quoted says you can't ask for anything beyond an email address. It's perfectly fine to ask for an email address. (Though I don't think it's a good idea unless you prefill the box)
I think that's an overly narrow interpretation of "visiting a single page". I've seen very prominent providers who've definitely been around long enough to know the legalities (the hard way) use the "enter your e-mail address" approach.
When I click "unsubscribe", I expect to be unsubscribed. If I just get a page that invites me to enter my email, which the page should know already, I find it's easier, and vastly more satisfying, just to mark the mail as spam.
Ok, if we are going to start using that "mark as spam" button to punish people, maybe then I should go sign up for your comms.io "tell me when the product is ready" mailing list using a bunch of Hotmail and Gmail accounts, and mark your messages spam on all of them when I receive them.

I mean, if we are going to use that button to feel "satisfied" by punishing others whose business practices we or actions we disagree with, rather than to actually mark, you know, actual spam that we shouldn't have received in the first place, why not include some old fashioned tit-for-tat, right?

Seriously: you are abusing the right to be part of a collective spam filter by interpreting the rules of that law in that way. You aren't even doing it in a way that other users of that spam filter are going to obviously appreciate: a lot of people (heaven forbid) actually like receiving the email we sign up for.

Have I "abused" your internal mental rules of email behaviour? I don't care. Perhaps it's analogous the way that you have abused the downvote feature on HN to express your disagreement with my point, but I think I have more justification.

Actually, spammy behaviour by "legitimate" senders should be punished, and they will get the message. Unsubscribe should be one-click - email users have enough on their plates already, and if I have done something, however small, to improve the behaviour of mailers, I feel great about that.

"Downvoting has always been used to express disagreement." -- pg [http://news.ycombinator.com/item?id=392347].

Regardless, I happily admit to having personally downvoted your comment (although I think I accidentally upvoted your response to dubcanada :() under any set of rules: your comment expressed, not just matter-of-factly, but with a sort of vindictive glee, that you were happy to interpret that law however you wanted, and then use a vaguely related collaborative system to enact your personal punishment on others, despite how other people using that system may feel.

In so doing, your comment didn't address either of the points made by its parent: 1) that that seems to be a narrow definition and 2) that major providers seem to believe that this is fine, and they are large enough to probably know what they are doing. If anything, your comment admits that it is wrong, but that it somehow more personally satisfying to do the thing you want to do regardless. If I can't downvote you for that, I'm not certain why we have downvotes at all ;P.

> Actually, spammy behaviour by "legitimate" senders should be punished, and they will get the message.

The situation here is not "spammy behavior". Even if the behavior in question violated that law (which it does not seem to), that still wouldn't make the result "spam". When you combine this with your interpretation of that law being somewhat fringe, using the word "spam" here loses meaning.

> Unsubscribe should be one-click - email users have enough on their plates already, and if I have done something, however small, to improve the behaviour of mailers, I feel great about that.

Even if you believe that "encourage behavior" is a legitimate usage of the shared spam filter you are participating in, you have to realize that the behavior you are thereby trying to encourage is really problematic: it's like encouraging websites to just tell anyone your password when they click the "I forgot my password" button.

The various threads on this post have demonstrated multiple cases, some malicious, some benign--and even some from people who claim to be benign but don't pass the "would the person I'm doing this to consider it malicious" test--as to why "click link with no verification of any kind" should not instantly unsubscribe you from these mailing lists.

Moving further into "even if": even if (and I maintain that this is just wrong) you decide "spam filters should be used to determine whether people are in compliance with the CAN SPAM Act", the law states you are actually allowed to have interfaces that include "menus" as part of the opt-out to determine what should be opted out of (as you may want to continue receiving some e-mail, but not things like that).

Meanwhile, the law seems perfectly happy to not even require a link at all: you are actually allowed to require the user to send you a message in reply asking to be removed (in reality, it doesn't even mention having a website at all). Further, the law actually states you can continue to receive mail for 30 days after you initiate the opt-out.

Honestly, in a perfect world, it would seem to be that no e-mail would ever contain an unsubscribe link, and would tell the user "if you want to unsubscribe, reply to this e-mail and tell us you want to be unsubscribed"; there are ways (involving usage of e-mail headers that affect the reply to and return paths) to make forwarding the e-mail then safe against benign mistakes made by friends, and fairly secure against malicious attacks made by people you forward the e-mail, in ways that the link are not (as evidenced by the premise of this article).

> "Downvoting has always been used to express disagreement." -- pg [http://news.ycombinator.com/item?id=392347].

As I can find no reference to this in the guidelines, I guess this unofficial statement is the best we will get. Not a good policy - it's non-standard, and encourages the wrong kind of behaviour, but in the case of HN I will concede the point.

> that you were happy to interpret that law however you wanted

I am not interpreting any law. What someone does with their own mail client is between them and their provider - and that's in the cases where marking as spam is even sent to the provider, which is not the standard behaviour.

> if you decide "spam filters should be used to determine whether people are in compliance with the CAN SPAM Act", the law states you are actually allowed to have interfaces that include "menus" as part of the opt-out to determine what should be opted out of (as you may want to continue receiving some e-mail, but not things like that).

You seem to imagine that "spam" is purely a legal definition because there exists an act of congress that seeks to limit it. The term long predates the act, and the capabilities we have developed to fight it do not depend on the specifics of US law. Do I, or any regular mail user, care that the law allows menus? No, make us jump through hoops and we get mad. Or "gleefully vindictive", if you're feeling fragile.

> the law actually states you can continue to receive mail for 30 days after you initiate the opt-out.

Which is why we do not rely on that particular law in the fight against spam.

But in fact, for most mail users actual spam is not a big problem. Gmail has great filters for example, and very rarely do most power users need to trawl through their spam folder for mis-filed messages. For most users, spammy behaviour by "legitimate" senders is much more pressing. If people really love your content, one-click unsubscribe is not going to keep them from it. If you put obstacles in the way of unsubscription, if you make it easier for them to mark you as spam (or filter you out, whatever), they will do so. My time, and the time spent by millions of mail users, is worth something, and is not to be wasted by mass-mailers' borderline behaviour.

So if you are one of these, I suggest you to give serious consideration to the hard-pressed user's experience of email.

You do know that email clients send an email to the email sender that gets recorded correct? For example if you press Mark as Spam in hotmail. And AOL sent you the email using MailChimp, you will show up as "spam" in MailChimp.

That also gets dinged against the sender and an account can be suspended if its too high.

TLDR; you're not using it as it was intended.

It improves their behaviour. I have lost count of the number of mailing lists I have had to unsubscribe because I simply used their product, without explicitly asking to be put on the list. That's spam, whether they bought my email, or just took it from some other list that they legitimately had.

MailChimp etc are for messages you explicitly sign up for.

How do you figure?