Single Click Unsubscribe
I know this has been discussed in the past: https://lists.mailman3.org/archives/list/mailman-users@mailman3.org/thread/X...
However, Google has recently announced that they will be enforcing one-click unsubscribe for bulk senders: https://techcrunch.com/2023/10/03/gmail-to-enforce-harsher-rules-in-2024-to-...
Thoughts?
J D writes:
However, Google has recently announced that they will be enforcing one-click unsubscribe for bulk senders: https://techcrunch.com/2023/10/03/gmail-to-enforce-harsher-rules-in-2024-to-...
Thoughts?
One-click unsubscribe for bulk senders of *commercial* email. For those of you who are using Mailman to send bulk commercial email, I guess you have to worry whether they're going to apply this to your advertising and product announcement lists only, in which case I guess you end up with a higher than current unsubscribe rate (but if you're smart you'll figure out how to use that expression of disinterest to advantage! ;-) Or if they are going to apply it to user discussion forums as well, in which case you have to think about the issue of user-on-user mischief (eg, redact OTKs or whole footers in quoted material). I'm not sure if we should be in the business of providing those features (they're kinda getting into content and business model), but I'd at least consider adding them to contrib, dunno about the other devs tho. For one thing, we already provide the OTK infrastructure for email verification.
The rest is a nothingburger too. It looks like they're just saying they're going to enforce best practices, like publishing SPF and DKIM policies and signing your outgoing mail with valid keys. Mailman users should already be doing those things, because a lot of sites already bounce or discard unsigned email without valid signatures.
It's the rules that Google does not announce, especially when they have publicly announced the opposite, that are a big threat. Personally I think the company has long since gone over to the Dark Side of the Force, and I'm rooting for the FTC.
Steve
Hi, reviving this thread as Google's enforcement date is a week away.
Stephen J. Turnbull wrote:
One-click unsubscribe for bulk senders of *commercial* email.
As much as I wish this was true, I don't think it's accurate; the "Email sender guidelines" explicitly say "Marketing messages *and subscribed messages* must support one-click unsubscribe, and include a clearly visible unsubscribe link in the message body."0 (emphasis mine.)
To me, "subscribed messages" in the above means the policy applies to everyone sending over 5k emails daily, whether for marketing or not.
All the best, Ole
On 1/25/24 15:21, olebra@samfundet.no wrote:
To me, "subscribed messages" in the above means the policy applies to everyone sending over 5k emails daily, whether for marketing or not.
All the best, Ole
Mailman-users mailing list -- mailman-users@mailman3.org To unsubscribe send an email to mailman-users-leave@mailman3.org https://lists.mailman3.org/mailman3/lists/mailman-users.mailman3.org/ Archived at: https://lists.mailman3.org/archives/list/mailman-users@mailman3.org/message/...
You can always put something like the above "To unsubscribe ..." line in the lists footer as we do. Gmail's web UI renders that as a mailto: link. Further, at least in some cases, Gmail's web UI recognizes the List-Unsubscribe header in the message and provides it's own Unsubscribe buttons in the web UI.
Granted, these aren't truly "one click" as they require confirmation,
but that can be avoided by setting a list's unsubscribe_policy to open.
Also granted that Gmail is the 900 pound gorilla here, but unsubscribe links that don't require confirmation are a bad idea. Even if the link contains some kind of encrypted data to ensure it can't be spoofed, there is still a danger if I forward list mail to a 3rd party and they click my unsubscribe link.
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan
On Fri, Jan 26, 2024 at 1:45 AM <olebra@samfundet.no> wrote:
To me, "subscribed messages" in the above means the policy applies to everyone sending over 5k emails daily, whether for marketing or not.
One more correction: 5k emails daily *to Gmail*.
Danil Smirnov
All the best,
Ole
Mailman-users mailing list -- mailman-users@mailman3.org To unsubscribe send an email to mailman-users-leave@mailman3.org https://lists.mailman3.org/mailman3/lists/mailman-users.mailman3.org/ Archived at: https://lists.mailman3.org/archives/list/mailman-users@mailman3.org/message/...
This message sent to danil@smirnov.la
olebra@samfundet.no writes:
Hi, reviving this thread as Google's enforcement date is a week away.
Fooled ya! I recently discovered they've been randomly applying the SPF requirement to my own mail for months, and have already made it a hard no in advance of the announced implementation date.
must support one-click unsubscribe
I bet this won't last long. As Mark points out, one-click anything in email is a very bad idea. For one thing, as soon as it gets widely implemented, I'm pretty sure that somebody will write a bot that searches the web for archives of email lists and just goes clicking every unsubscribe link it finds. :-D There are other attacks that would work on naively implemented links.
If we must implement this, we should limit the pain to Gmail (and any other provider who adopts this) by adding one-click unsubscribes only to gmail.com addresses, with a different URL template from the normal unsubscribe URL.
the policy applies to everyone sending over 5k emails daily, whether for marketing or not.
It means whatever Gmail thinks it means.
So I have to update: Friends don't let friends use Microsoft, Oracle, Apple, AOL, Yahoo!, AT&T, Verizon, Comcast, SolarWinds, or Gmail.
Steve
participants (5)
-
Danil Smirnov -
J D -
Mark Sapiro -
olebra＠samfundet.no -
Stephen J. Turnbull