Who Does That, Anyway?

Yahoo’s big change to their DMARC policy has sparked a remarkable amount of debate among stakeholders in the email and security ecosystems. As is usually the case with these crowds, there’s a lot of religion both in support of and against the change. I’m trying to stay out of it, but I’m not sure I’m succeeding.

So, to take a small detour, I thought it might be interesting (or at least somewhat less exasperating) to advance some sort of answer to a related question I’m hearing from both sides: who in the actual heck would use an address from a free inbox provider as the From: address for their own marketing and newsletter mail? Continue reading

Yahoo Mail Brings the Pain with DMARC Policy Change

It’s going to be a busy Monday for many ESPs and small senders out there today.

Recently, Yahoo Mail appears to have changed its DMARC policy to “p=reject,” meaning that ESP customers who send using a Yahoo email address in the From: line are going to see a spike in hard bounces. In many cases, that will trigger support calls to their ESP’s deliverability teams.

The change doesn’t affect just mail sent to Yahoo, but to any domains that are participating in DMARC. By making the change, Yahoo is essentially instructing any receiving domain that checks Yahoo’s DMARC policy to reject mail that purports to originate from Yahoo’s domain, but that comes from an IP address belonging to someone else.

On a first take, that might sound like a perfectly reasonable security measure. However, lots of mom and pop shops and other small senders who rely on ESPs for their mail programs are using From: addresses (e.g., business_name@yahoo.com) that are serviced by a free inbox provider, including Yahoo, Gmail, and Aol. It’s not an optimal way of doing things, but there’s nothing inherently abusive about it, either.

I’m hoping that Yahoo will consider reversing the change – and soon! – as it is very likely to result in the inadvertent rejection of a lot of wanted mail. I’ll keep you posted.

Edit: Here are samples of bounces from different large ISPs that you can use to grep your own MTA logs:

smtp;550 5.2.0 mav01n00T5PRKmP0Fav191 Message rejected due to DMARC. Please see http://postmaster.comcast.net/smtp-error-codes.php#DM000001
smtp;550 5.7.1 Unauthenticated email from yahoo.com is not accepted due to domain's DMARC policy. Please contact administrator of yahoo.com domain if this was a legitimate mail. Please visit http://support.google.com/mail/answer/2451690 to learn about DMARC initiative. 100si2781324qgv.4 - gsmtp
smtp;550 5.7.1 DMARC failure for domain yahoo.com, policy reject

The Yahoo Inactives Bounce Storm

In my time consulting for senders on deliverability issues, I’ve heard more than a few clients try to explain to me why inactive recipients are never really a problem – until there’s a problem.

Starting July 15th, there is going to be a problem. Continue reading

Reply-All: Minty Pheonix Edition

Changes Coming to AOL and Yahoo! Inboxes, Too

Much has been written in the last few weeks about big changes to the free e-mail offerings from Google and Microsoft. Hotmail rolled out Wave 4, with Sweep and Time-Traveling Filters that penalize “gray mail” by sweeping it out of the inbox. Gmail’s Priority Inbox now rewards messages that it deems most relevant to the recipient with preferred positioning in the inbox.

In the meantime, AOL and Yahoo! have been working quietly on their own major inbox releases. However, early glimpses at new features hint at altogether different strategies for capturing and holding users’ attention – important changes that may influence how recipients interact with your e-mail and help propagate your message.

It’s been about 20 years since AOL and e-mail became nearly synonymous (“You’ve got mail!”). Today, comScore ranks AOL mail dead last in market share behind Yahoo!, MSN and Google. AOL will attempt to rise from the ashes when they take the wraps off “Project Pheonix” later this year. Few details about specific changes to the user interface have been confirmed, but insiders say we should expect tighter integration with AOL Instant Messenger, SMS messaging and MapQuest. They’re planning a Gmail-like archive feature and enhanced search across users’ e-mail folders. AOL say they will present fewer ads at entry points, but will serve up more targeted advertising when users drill down into AOL’s content sites.

A recent interview with AOL Mail Ops President Brad Garlinghouse also hints at a larger effort to deliver an integrated messaging platform for all of the users’ various inboxes – be they traditional e-mail inboxes at Yahoo!, Gmail or MSN, as well as IM, SMS or social media inboxes. He notes that Internet users now manage an average of 2.4 e-mail addresses, up from 1.9 five years ago. Garlinghouse intimates that Phoenix will position the AOL mail site as a hub for users to manage them all.

Yahoo! has been far less cagey in discussing new features in its upcoming mail release, dubbed “Minty”. Users will be able to update their Facebook status from within their Yahoo! inbox. Earlier this year, Yahoo! made a few other social media moves, announcing partnerships with Twitter and social media game giant Zynga, and the acquisition of location-based social network Koprol.

But the most noticeable changes will be to the user interface. Yahoo! is promising a leaner, faster-loading site that more closely resembles the mobile apps (read: iPad) versions of its offerings. The interface changes are designed to increase market share in non-US markets, where consumer broadband is not as common, and load times can still be an issue for larger percentages of the user base.

It doesn’t appear that either AOL or Yahoo! are planning any major changes to the way it filters or delivers inbound mail in these releases. The message for senders is that social media and e-mail are converging quickly: Google’s abortive attempt to socialize e-mail with Buzz did not spell the end of other efforts, and it’s possible that more than one will succeed. If that happens, senders may have the chance to turn their recipients’ entire social networks into prospects.