Apr, 2014 : AOL Changes Email Policy To Prevent Spoofing Attacks

📅 April 23, 2014 - AOL has made some changes to its email services aimed at protecting customers from unauthorized use of their account following the email hack earlier this week.

According to a post on AOL's blog, its DMARC policy has been changed to “p=reject” to ensure users protection against spoofing and future hacking attacks.

“Mail sent on behalf of AOL Mail users to DMARC-compliant domains will be rejected by those domains unless the mail passes SPF and/or DKIM authentication checks AND the domain(s) used in those checks match aol.com,” says the post.

“We recognize that some legitimate senders will be challenged by this change and forced to update how they send mail and we sincerely regret the inconvenience to you.”

On Monday many users were reporting that their AOL Mail had been hacked, with many complaining about spam messages being sent from their account and others stating that their email had sent spoofed messages to their contact book.

TechCrunch reported that “sources close to the company” had reason to believe that less than 1 percent of AOL customers were impacted by the hack.