3 ms·

If I get spam mails on lists I never signed up for, I either hunt down the X-Abuse header and report there (if they use a reputable bulk mailing service), other

• inetknght 6y ago
  > if they use a reputable bulk mailing service If they use a reputable bulk mailing service instead of using their first-party domain then they are indistinguishable from a phishing attack.
  • BGZq7 6y ago
    > If they use a reputable bulk mailing service instead of using their first-party domain then they are indistinguishable from a phishing attack. With most bulk mailing services, the message will come from the "first-party domain". They will have configured that service as a legitimate sender for the domain via SPF/DKIM DNS records.
    • inetknght 6y ago
      > With most bulk mailing services, the message will come from the "first-party domain". They will have configured that service as a legitimate sender for the domain via SPF/DKIM DNS records. It's not just the from:marketing@firstparty.com that I'm talking about. If the unsubscribe link does not also go to firstparty.com, then it's still indistinguishable from phishing.
  • judge2020 6y ago
    No, a reputable bulk mailing service can still send from their customers' principal domains with spf/dkim set up to include that service's info.
    • inetknght 6y ago
      > No, a reputable bulk mailing service can still send from their customers' principal domains with spf/dkim set up to include that service's info. Tell that to the links in the email that go to the reputable service's click aggregation service.
• deleted 6y ago
  [deleted]