It's enabled by default, and enforced on yahoo.com/my.yahoo.com http://developer.yahoo.com/yap/homepage/