Wednesday, December 18, 2024

Warning As Gmail Messages Disappear—Here’s The Fix From Google

Must read

Having seen, or rather not, messages to Gmail users disappearing into the ether for more than 12 months, one Forbes.com reader reached out in desperation for help. If you are suffering from a similar disappearing Gmail email issue, here’s how to fix it straight from the insiders at Google itself.

ForbesNew Email Attack Warning—5 Things To Look Out For

The Disappearing Email Issue—Gmail Users Not Receiving Messages

After reading an article at Forbes.com about Gmail account takeover attacks, one reader thought they would reach out to me as I mentioned a Google insider had helped with advice for Gmail users. The thing here is, though, that this particular reader wasn’t using a Gmail account but rather sending an email to one. Actually, to be precise, more than one, and that’s where the issue arose.

“If I email more than two Gmail accounts,” the reader said, “the Gmail users do not receive the email.” Others included in the email but not using Gmail do receive the email, however. There were “no error messages, nothing,” the reader continued, “the email disappears into the ether—usually I can email single Gmail users, but not always.”

Once again, I chatted with Google spokesperson Ross Richendrfer, who deals with all things Gmail and workspace security and privacy. If anyone could get to the bottom of this mystery, it was going to be Richendrfer and the team of Gmail techies he had to call upon for help.

Investigating The Disappearance Of Gmail Messages

So as to preserve the privacy of the reader in question, I only passed on the bare bones of the problem to Richendrfer, who tried to help nonetheless. This did, unfortunately, mean that Google was hard-pressed to provide a definitive answer without knowing the sending domain or seeing any example email messages. “Any message failures,” Richendrfer said, “spam or otherwise, would be sent back to the sending domain, which should be observable for the user.” The problem could have been down to something on the domain side that was preventing the user from accessing the delivery failure bounce messages, maybe that server doesn’t accept inbound failure bounces, for example. But Richendrfer had a hunch it was more likely going to be an authentication issue, with “the messages getting dropped before they even get to Gmail due to improper authentication.” As such, working with the reader’s own provider to ensure messages were being properly authenticated was the first step that Google recommended.

ForbesGoogle Confirms New Gmail Security Surprise—And It’s So Simple

Authentication Issues Likely At The Heart Of The Disappearing Gmail Problem

To get to the bottom of the problem, what Richendrfer and the Google Gmail experts really needed was sight of the sending domain in question and an example of the emails that are not getting delivered to Gmail recipients. I approached the reader to ask if this was possible, and they gladly gave their consent. Armed with this information, I went back to Google. The Gmail tech team then took a closer look and determined, from what it could tell, that setting up DomainKeys Identified Mail authentication on the sending domain server would likely solve the issue. I’ve written about DKIM before, but here’s the TL;DR.

Sender Policy Framework allows your mail server to determine if an email that claims to be from a specific domain actually does come from a host that is authorized by way of the Domain Name System record. DKIM has the same goal, but approaches it from the direction of a digital signature, well, a hash value attached to the email message itself and encrypted with a private key. This ensures that the email is as sent when it arrives at the destination as any attempts to modify the contents are immediately visible so the email can then be rejected by server.These are bound together by the Domain-based Message Authentication, Reporting and Conformance security protocol known as DMARC which checks both the SPF and DKIM authentication records for validity and then decides what should be done with the email accordingly.

ForbesGmail Leak Reveals New Email Addresses Are Heading Your Way

Google Authentication Resources For Sending Email To Gmail Users

Google has a specific resource for setting up DKIM which provides step-by-step instructions for domain administrators on how to authenticate outgoing email to Gmail accounts and protect the domain against spoofing.

“If the user has questions about implementation or sees delays in delivery,” Richendrfer said, “they can directly contact Google support.”

Latest article