Yahoo DMARC Policy Change - What Should Senders Do?

By The Yahoo Mail Team

We recently changed our DMARC policy to proactively protect our users from increasing email spam that uses Yahoo users’ email addresses from other mail servers. This is an important step to secure our users’ email identities from being used by unauthorized senders. It also interferes with some long-standing uses of identities that are authorized by the user but not verifiable.

By publishing a “p=reject” record, Yahoo tells other DMARC compliant systems  to reject mail from Yahoo users that isn’t genuinely originated from a Yahoo server. This affects only mail with Yahoo addresses on the From: line, like this:

From: “Example Sender” <example-sender@yahoo.com>

To: “Favorite Recipient” <recipient@domain.example>

Subject: Testing Email!


If you are sending email messages on behalf of a user with an email address at Yahoo, your messages will be rejected due to failed authentication. Many kinds of companies might do this. For instance

  • Email Service Providers (ESPs) sending for businesses using Yahoo addresses

  • Services coordinating groups of people, like mailing lists, sports teams, online courses

  • Websites where visitors may share with their friends via email, like news and shopping sites

  • Other small business services, including business web portals and calendaring solutions, that send mail between customers and businesses

  • ISPs and other mailbox services that allow their customers to send mail with addresses outside the service’s control

  • Mail forwarding services


If you are sending on behalf of a business, what should you do?

Businesses are going to be best served by using addresses they control, so we recommend that they move to sending mail from their own domain.

From: “Example Sender” <example-sender@senders-r-us.example>

To: “Favorite Recipient” <recipient@domain.example>

Subject: Testing Email!


Another solution would be to use an address you control, which could be a dedicated address at your site, or a single address for different senders. Let’s pretend you are “b2b.example”. One way would be:

From: “Example Sender” <example-sender@b2b.example>

Or you could do:

Reply-to: “Example Sender” <example-sender@yahoo.com>

From: “Example Sender” <noreply@b2b.example>



If your website provides the ability to share items in email, what should you do?

If you are sending on behalf of individuals, we recommend that you send mail from your own domain. You can set a Reply-To: header with their email address so that people can reply to the sharer instead of to you. Let’s pretend you are “sharing.example”:

Reply-to: “Example Sender” <example-sender@yahoo.com>

From: “Example Sender” <noreply@sharing.example>

If you are an ISP or email provider and your users want to use Yahoo addresses, what should you do?

Consider allowing customers to connect directly to Yahoo SMTP servers, or contact us at dmarc-help@yahoo-inc.com to discuss authentication and configuration options.

If you are a mailing list owner, what should you do?

Mailing lists are a special case of sending mail on behalf of individuals. The most common option is to use the mailing list’s address instead of the sender’s on the From: line. This will change the reply behavior. Some mailing lists also choose to act as pure forwarders and resend the mail without breaking DKIM signatures. As of this publication, no common mailing list packages provide straightforward configuration options that produce DMARC compatibility, although Mailman has relevant features starting in 2.1.16. If you are a developer of mailing list software and would like help adding features to allow participants from domains with DMARC p=reject, please contact us at dmarc-help@yahoo-inc.com.

More information about the DMARC specification and implementation advice is available at http://dmarc.org/

Power to the people: Introducing better ways to compose mail and view contacts

Your inbox isn’t simply about messages, it’s about the people that you email. So today, we’re announcing two big improvements in how you view and reach out to friends, family and colleagues in Yahoo Mail.image

Note: The improvements we are announcing below have begun rolling out to millions of users starting today. For those who are not yet seeing the upgraded features in their webmail interface, you can get to the top of the upgrade list here.

The first big improvement comes when composing email. Now when you start typing in the to, cc or bcc lines, you’ll see the following dramatic improvements:

  • All email addresses at your fingertips: We’ve all become accustomed to our inbox remembering email addresses we’ve used in the past and auto-suggesting them when we type, even if we didn’t add the information to our address books. Yahoo Mail has taken this feature one step further. Now, Yahoo Mail remembers every email address you’ve ever used or even seen in your inbox, and suggests the best one to use. There are even new ways to find people: just enter the first few characters of someone’s name, email address, initials, or even their company or school name and Mail will instantly suggest the best person.

  • Photos and Names: Now instead of free2rhyme@yahoo.com you’ll see the full name and photo of the person you are emailing more often - making it easier to make sure you’re emailing the right person. Photos are shown from Facebook and Yahoo Profiles.  To see as many photos as possible, be sure to link your Yahoo account to Facebook.

  • Picking the right group of people for your email: When you want to send an email to more than one person, the new smart auto-suggest will instantly suggest the three most likely recipients (and their best email address) based on your previous emails. Auto-suggest is constantly learning and improving. For many emails, you should be able to add everyone you need to an email without typing another letter after the first recipient is selected.

To get even more out of the new auto-suggest, save time by just hitting the down arrow before you type a letter and we’ll show six top contacts from which to choose. Of course, if you ever see an email address you’d prefer to hide, just click on the “X” to the right of the suggestion.

Next up, we’re now surfacing more details about your contacts by giving you a quick snapshot of your most recent interactions with someone. So if you’ve had a long email thread with a friend about an upcoming vacation, simply navigate over to your contacts and select your friend’s name to quickly see the latest emails and attachments they’ve sent you about the trip.

This feature is rolling out to U.S. webmail users over the next day or so.  

We’re excited to be leveraging technology from Xobni, which Yahoo acquired last year, to power these two new features. To help us improve your experience even more in the future, please let us know what you think!

By Josh Jacobson, Product Manager, Yahoo Contacts

100 million ways to say I love you with Yahoo Mail

This one goes out to all you lovebirds out there!

Introducing Autocompose by Yahoo Mail. The first love letter generator that lives right in your inbox. Just choose the kind of love you want to send and let Autocompose do the rest. Finally, the perfect words for everyone in your life.

Tell your sweetie that they play the strings of your heart with delicate grace, or tell your best friend that you wish you had even a quarter of their swagger. Feeling disenchanted with V-Day? There’s a whole category for you, too. With 100 million different message options, there’s no shortage of love to go around.

Say it with Autocompose. The best love note you never wrote is available via web mail on mail.yahoo.com (US English) today through midnight PT on Sunday, February 16.

Here’s how to generate love notes with Autocompose:

1. Log in to Yahoo Mail on your computer. Click on the ❤ next to Compose

image


2. Choose the type of message you’d like to send

image


3. Click on Autocompose button to find the perfect letter

image


4. Edit the note to your liking, then send.


We hope you enjoy this Valentine’s day feature.

Happy Valentine’s day to you and to everyone you love!

The Yahoo Mail Team

View Attachments More Easily

Everyday, millions of people send and receive attachments in Yahoo Mail. We want to make it easy for you to quickly view your attachments, so today we’re putting the spotlight on our document preview feature.

You can simply preview your Microsoft Office attachments (Word, PowerPoint and Excel) and Adobe PDFs directly within Yahoo Mail, saving you clicks and time. To preview your document, simply click directly on the file name and — voila! — you’ll see a full preview of your document.

image

image

By Mayukh Bhaowal, Senior Product Manager, Yahoo Mail

Important Security Update for Yahoo Mail Users

yahoo:

Security attacks are unfortunately becoming a more regular occurrence. Recently, we identified a coordinated effort to gain unauthorized access to Yahoo Mail accounts. Upon discovery, we took immediate action to protect our users, prompting them to reset passwords on impacted accounts.

Based on…

Planning Your Day Made Easy with Yahoo Weather in Yahoo Calendar

How do you start your day? For most of us, one of the first things we do is check our calendar and look at the weather. With that in mind, we wanted to make it easier to plan your day - so we’ve integrated Yahoo Weather right into your Yahoo Calendar.

image

Now, your calendar automatically identifies your current location to give you the most up-to-date local weather. While viewing your daily, weekly or monthly calendar, click the weather icon to see a beautiful Flickr photo depicting your local weather conditions with the forecasted high and low. Click on the photo to see more weather information like the weekly weather forecast, sun and moon phases, wind and pressure and more at Yahoo Weather.

All the photos are from the Flickr group “Project Weather” - an open group where anyone can submit their weather photos for the opportunity to be featured on Yahoo Weather.

We hope you enjoy using Yahoo Weather in your calendar! Please continue to send us your feedback and Flickr photos!

By Ashish Parnami, Senior Product Manager, Yahoo Calendar

HTTPS Now Default in Yahoo Mail

by Jeff Bonforte, SVP of Communication Products

Yahoo is fully committed to keeping our users safe and secure online. As we promised back in October, we are now automatically encrypting all connections between our users and Yahoo Mail. Anytime you use Yahoo Mail - whether it’s on the web, mobile web, mobile apps, or via IMAP, POP or SMTP- it is 100% encrypted by default and protected with 2,048 bit certificates. This encryption extends to your emails, attachments, contacts, as well as Calendar and Messenger in Mail.

Security is a key focus for us and we’ll continue to enhance our security technology and policies so we can provide a safe and secure experience for our users.