Home / Blogs

How Bad is Goodmail?

Goodmail Systems made a big splash last week when AOL and Yahoo announced that they will be giving preferential treatment to mail that uses Goodmail’s CertifiedEmail service, claiming (implausibly) that this has something to do with stopping spam… Since Goodmail charges senders for each message, some people see this as the end of e-mail as we know it. I have my concerns about Goodmail, but a lot of the concerns are either overblown or based on bad reporting.

Both AOL and Yahoo sent out press releases saying that Goodmail would stop spam, which is silly since the mail that Goodmail certifies is extremely unlikely to be unwanted, and spammers will ignore Goodmail like they’ve ignored any other certification scheme that requires money or effort. (My friends at both Yahoo and AOL tell me that they tried and failed to explain to the PR flacks what Goodmail really is.)

Goodmail is in approximately the same business as Habeas and Bonded Sender, acting as an intermediary between bulk senders and recipients. Unlike the other two, Goodmail charges senders for each message sent, and rebates some of the charge to participating recipients, including both AOL and Yahoo. This obviously creates some unfortunate incentives, since the more mail a recipient accepts, the more rebates they get, which has led some people to conclude that this is a plot to stuff more spam into unwilling recipients’ mailboxes. Press reports fanned this rumor by reporting, wrongly, that AOL was going to scrap its existing whitelist for well-behaved bulk senders and require them all to use Goodmail.

AOL has assured me that their existing whitelists are not going away, and further that Goodmail only skips the first level of spam filtering. Users’ existing controls like only accept mail from people in my address book continue to apply. The other thing that AOL does with Goodmail certified mail is to show all the embedded images, without requiring that the user either enter the sender in his address book or click a button to say the images are OK.

So what is Goodmail? It’s a very expensive and labor-intensive mail certification system. It appears to cost about $10,000 to get set up, betwen the signup cost and the cost of upgrading mail software, plus a per message charge in the range of a penny a message. This price is unlikely to go down because of all of the labor involved. For example, Goodmail tells me that every ‘From:’ line that a sender wants to use has to be manually approved. That penny may not sound like much, but for bulk e-mail it is a vast amount, probably a hundred times what your garden variety non-spam bulk newsletter costs. (Spam is even cheaper to senders, since they generally steal other people’s resources to send it.) This means that it’s only worth using on unusually valuable mail where the sender really, really, wants it to go through, which in practice means transactional mail, stuff like order confirmations and bank statements. Yahoo says that they will only accept transactional mail through Goodmail; AOL hasn’t but it’s hard to think of any email ads that are worth an extra penny apiece.

The benign way to look at Goodmail is that it’s yet another way for senders to get their most important mail through. Banks, for example, would just love to send you your monthly statements by e-mail, but unless you explicitly agree to it, along with a warning that the statement might not arrive due to flaky e-mail, they can’t insist. If a certification scheme made e-mail as reliable as paper mail, they probably could insist, and a penny a message is a bargain compared to the 50 cents or more that a paper letter would require. When DKIM is better defined, senders will probably use it for the same function since it’s quite easy to arrange for third party certifiers to sign mail. In this sense Goodmail is stalking horse for DKIM.

A lot of commentators have overreacted to Goodmail as “pay to spam” which it’s not, and posited conspiracy theories about ISPs deliberately degrading non-paid mail to force mail into the paid channel. It’s worth some concern about the idea that you need to bribe recipients to accept your mail, but although I have no doubt that some foolish and greedy mail system operators may try it, it’s vanishingly unlikely that widespread charging will happen, simply because there are so many alternative mail providers. Also, the cost of a single customer phone call asking “what do you mean my granddaughter can’t send me her pictures unless she pays you?” would wipe out the revenue from thousands of messages.

In the long run, I think that most transactional mail like bank statements and order confirmations are better delivered via RSS, but I’ll write about that separately.

By John Levine, Author, Consultant & Speaker

Filed Under


Larry Seltzer  –  Feb 14, 2006 9:36 PM

I’m basically in complete agreement and want to emphasize your point that Goodmail is *not* and anti-spam scheme. In a sense, it’s an anti-anti-spam scheme for senders. Much of the misunderstanding about Goodmail, the part not based on false charges made about it in irresponsible news stories, is based on the assumption that it’s supposed to be an anti-spam mechanism and fails badly at it.

I should add though that Goodmail told me, and I’ve seen it reported elsewhere, that the plan is for a charge in the neighborhood of .25 cents per message, but that they don’t have a set rate card yet and there could be discounts for various criteria.

Dave Crocker  –  Feb 16, 2006 4:03 PM

When DKIM is better defined, senders will probably use it for the same function…

DKIM is already quite well defined, and already in production use.  The list of deployed implementations, shown under DKIM Site is not lengthy, yet, but it is quite real.  The standards effort in the IETF is for refinement, rather than stabilization or utility.

Comment Title:

  Notify me of follow-up comments

We encourage you to post comments and engage in discussions that advance this post through relevant opinion, anecdotes, links and data. If you see a comment that you believe is irrelevant or inappropriate, you can report it using the link at the end of each comment. Views expressed in the comments do not represent those of CircleID. For more information on our comment policy, see Codes of Conduct.

CircleID Newsletter The Weekly Wrap

More and more professionals are choosing to publish critical posts on CircleID from all corners of the Internet industry. If you find it hard to keep up daily, consider subscribing to our weekly digest. We will provide you a convenient summary report once a week sent directly to your inbox. It's a quick and easy read.

I make a point of reading CircleID. There is no getting around the utility of knowing what thoughtful people are thinking and saying about our industry.

Co-designer of the TCP/IP Protocols & the Architecture of the Internet




Sponsored byDNIB.com

Brand Protection

Sponsored byCSC


Sponsored byVerisign

IPv4 Markets

Sponsored byIPv4.Global

Threat Intelligence

Sponsored byWhoisXML API

Domain Names

Sponsored byVerisign

New TLDs

Sponsored byRadix