BIMI Support in Email Security.cloud

Products

• Email Security.cloud

Issue/Introduction

This article explains the support for Brand Indicators for Message Identification (BIMI) within Email Security.cloud.

Environment

Email Security.cloud

Cause

BIMI is an email authentication standard designed to display a brand logo in supported email clients. BIMI is not a feature or configuration setting enabled directly within the Email Security.cloud management console; rather, it is an industry standard based on DNS records.

Resolution

Since Email Security.cloud does not host these DNS records, you will need to coordinate with your domain's DNS administrator to implement the BIMI TXT record once your email authentication protocols are in place.

Before implementing BIMI, your domain must meet the following mandatory authentication requirements:

• DMARC: You must have a DMARC record published in your DNS with a policy of p=quarantine or p=reject.
• SPF: You must have a valid Sender Policy Framework (SPF) record authorized for your sending mail servers.
• DKIM: You must have valid DomainKeys Identified Mail (DKIM) signatures enabled for your outbound mail.

Once these protocols are verified and working, the BIMI TXT record can be published by your DNS administrator to your public DNS zone. For official implementation guidelines and specifications, please refer to bimigroup.org.