DNS Security
BIMI Explained
BIMI (Brand Indicators for Message Identification) helps compatible inboxes display your brand logo next to authenticated messages. It is a trust signal for recipients, not an email encryption feature.
What BIMI does
BIMI publishes a DNS TXT record at default._bimi.yourdomain.tld. The record points to your logo file URL, and optionally a certificate URL when required by mailbox providers.
Required foundation
- SPF and DKIM are correctly configured and aligned.
- DMARC is enforced (commonly p=quarantine or p=reject).
- Logo is valid SVG Tiny P/S and hosted on HTTPS.
default._bimi.example.com. 3600 IN TXT "v=BIMI1; l=https://example.com/logo.svg; a=https://example.com/vmc.pem"
FAQ
Does BIMI improve message delivery?
Indirectly. Better authentication hygiene helps reputation, but BIMI itself is primarily a display/brand signal.
Does BIMI require VMC?
It depends on the receiver. Some mailbox providers require VMC for logo display.