Email confirmation email flagged as Spam in Outlook.com

[davismtl]

User reported on Twitter that FxA was flagged in Outlook.com as spam: https://twitter.com/ltCatscratch/status/798958950813204481

@shane-tomlinson also confirmed the same thing with his account: https://irccloud.mozilla.com/file/goLbWeUy/Screen%20Shot%202016-11-17%20at%2017.45.48.png

I tested with my dummy Outlook account but was not flagged as spam.

Things to check:

• sender score in our email on acid account
• check Return Path's sender score: https://www.senderscore.org/

[davismtl]

Running email on acid test with Ryan

Results here: https://www.emailonacid.com/app/spamtest/display/summary/8AStorDaO0AtIB6Xm4kwW6o6Ccg+sd5e6VR1isvFS3xE6UGDRRzALHtBVrqlcXgSEATF1ouz9B+XmvmTXQTfbg==

[davismtl]

Suspicion confirmed:

The test is still running but for now, nothing else has been flagged.

[davismtl]

We failed 1 out of 71 blacklists:

http://www.sorbs.net/

[rfk]

Humph, if you use a popular web search engine to search for "amazon ses sorbs" you will find several threads about their sending IPs ending up in that particular blocklist.

[davismtl]

rfk confirmed it via another tool. We seem to be on two blacklists:

An ops bug will be filed to escalate with Amazon.

[rfk]

Ops bug here: https://bugzilla.mozilla.org/show_bug.cgi?id=1318513

[vladikoff]

cc @jrgm @jbuck see bugzilla bug above ^

[davismtl]

@rfk do we have any updates here?

[rfk]

No concrete updates here, but we can dive into it in earnest now that the new year is under way:

• When train-77 ships we should get flow events for bounces, which will let us understand get a better handle on our deliverability dynamics
• We need get cracking on #211 and the associated auth-server issue mozilla/fxa-auth-server#1565

If that doesn't have an impact, we'll have to look at getting standalone sending IPs and enrolling in programs such as those identified in https://bugzilla.mozilla.org/show_bug.cgi?id=1318513#c19

[davismtl]

From what I understood, we didn't need our own IP for enrolling in the program.

Seems like once we are removing bounced emails, we should sign-up to that program since we should be abiding by almost every best practice and then if we still have no luck, we can look into our own IPs.

[vladikoff]

from mtg: discussion should migrate to feature doc / feature card.

[rfk]

@rfk to migrate this to features infra rather than keeping this meta-issue alive

[vladikoff]

from mtg: some of the info from here will need to be added to the feature doc...

[vladikoff]

Tracked in fxa-56 #211