{"id":11873,"date":"2019-12-12T10:45:38","date_gmt":"2019-12-12T15:45:38","guid":{"rendered":"https:\/\/www.thesslstore.com\/blog\/?p=11873"},"modified":"2021-06-22T14:11:33","modified_gmt":"2021-06-22T18:11:33","slug":"verified-mark-certificates-the-bimi-standard-show-your-company-logo-in-your-customers-inbox","status":"publish","type":"post","link":"https:\/\/www.thesslstore.com\/blog\/verified-mark-certificates-the-bimi-standard-show-your-company-logo-in-your-customers-inbox\/","title":{"rendered":"Verified Mark Certificates &#038; the BIMI Standard: Show Your Company Logo in Your Customer\u2019s Inbox"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\" id=\"h-learn-about-bimi-a-new-email-standard-that-could-boost-your-email-visibility-build-customer-trust-and-help-fight-phishing\">Learn about BIMI \u2014 a new email standard that could boost your email visibility, build customer trust, and help fight phishing<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">If your job is related to email marketing, terms such as MX, PTR, SPF and <a href=\"https:\/\/www.thesslstore.com\/blog\/dmarc-reporting-and-email\/\">DKIM<\/a> are likely to be your bread and butter. If you\u2019re not familiar with these terms, though, let me give you the quick summary: These records protect you and your customers from spam and help email servers (such as Yahoo, Gmail, etc.) trust your server. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Well, guess what! It\u2019s time to add a new element called BIMI to your bread and butter. And this newcomer does something very different than the existing protocols \u2014 it showcases your company logo in your recipients\u2019 email inboxes.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Let\u2019s hash it out.<span id=\"newline\"><\/span><\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-what-is-bimi\">What is BIMI?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">An acronym for Brand Indicators for Message\nIdentification, BIMI is a new email standard that will allow brands to display\ndesignated, verified logos for authenticated email messages. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In simpler words, you can display your\ncompany\u2019s logo in users\u2019 inboxes (right next to your emails) once you\u2019ve been\nauthenticated to implement BIMI. In an email client that supports BIMI, your\nemails will look something like this:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"955\" height=\"968\" src=\"https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2019\/12\/bimi_example-yahoo.png\" alt=\"BIMI and Verified Mark Certificate example on Yahoo Mail\" class=\"wp-image-11874\" srcset=\"https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2019\/12\/bimi_example-yahoo.png 955w, https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2019\/12\/bimi_example-yahoo-296x300.png 296w, https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2019\/12\/bimi_example-yahoo-768x778.png 768w\" sizes=\"auto, (max-width: 955px) 100vw, 955px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Besides the obvious branding benefit, BIMI\nis intended to incentivize DMARC usage and help fight spam\/phishing.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>BIMI provides a meaningful incentive to help organizations complete their DMARC implementations, which will dramatically reduce fraud in inboxes worldwide. We hope the benefits of this standard will spur greater DMARC adoption of organizations of all sizes, thereby, making the entire email sending and receiving community safer.<\/p><cite> BIMI Group <\/cite><\/blockquote>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-verified-mark-certificate-vmc-the-glue-to-stick-bimi-to-your-emails\">Verified Mark Certificate (VMC): The Glue to Stick BIMI to\nYour Emails<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A Verified Mark Certificate (VMC) is a\ndigital certificate that authenticates your organization to display a BIMI\nlogo. Verified Mark Certificates provide several key functions:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Validate your organization and associate it with your official logo.<\/li><li>Stop phishers and spammers from showing well-known logos next to their emails.<\/li><li>Fight misuse of your company logo and brand.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Just like SSL\/TLS certificates, Verified Mark Certificates will also be issued by trusted third-party certificate authorities upon successful verification of the business. The current plan is for Verified Mark Certificates to be mandatory for BIMI to be activated on a domain. <a class=\"wpil_keyword_link \" href=\"https:\/\/www.thesslstore.com\/digicert.aspx\"  title=\"DigiCert\" data-wpil-keyword-link=\"linked\">DigiCert<\/a> is one of the first CAs to join this initiative \u2014 they\u2019ve already issued a verified mark certificate to CNN.com:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>DigiCert is excited to work with CNN and members of the AuthIndicators Working Group to take this first step in demonstrating the feasibility and benefit of VMCs for global brands under the BIMI pilot program. We know that there is a demand for issuing VMCs at scale and we are fully committed to providing that capability.<\/p><cite> Jeremy Rowley, DigiCert Chief of Product <\/cite><\/blockquote>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-how-does-bimi-work\">How Does BIMI Work?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">In order for BIMI to work, you need to:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Set up your BIMI record,<\/li><li>Validate your domain, and<\/li><li>Validate your logo.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">For verification\nof your domain, you need to validate your domain through the Domain-based\nMessage Authentication, Receiving &amp; Conformance (DMARC) standard with a\npolicy of quarantine or reject. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To authenticate your logo, you\u2019ll need a Verified Mark Certificate. This certificate, as we mentioned, is issued by certificate authority.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-what-is-a-bimi-record\">What is a BIMI Record?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Fundamentally, BIMI is a text record stored on the DNS server \u2014 just like MX, PTR, SPF and DKIM. Once you\u2019ve set up a BIMI text record on your server, your recipients&#8217; email service providers will attempt to verify it before displaying your logo. Therefore, in order for BIMI to work, both your domain and logo need to be validated properly.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A basic BIMI record is pretty simple\u2014it\nlooks something like this:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">v=BIMI1;\nl=https:\/\/example.com\/images\/logo.svg;<\/pre>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-how-verified-mark-certificates-work\">How Verified Mark Certificates Work<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">As mentioned above, verified mark certificates work on a similar principle as SSL certificates \u2014 they need to be verified and issued by a trusted third party (certificate authority). In this case, the certificate authority is verifying the organization details and the organization logo.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Because BIMI is still a work in progress, the precise details of verified mark certificates are still being hammered out. But we can assume the final product (hopefully available in 2020) will have a validation and issuance process similar to an OV or EV SSL certificate. <\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-how-verified-mark-certificates-validate-bimi-records\">How Verified Mark Certificates Validate BIMI Records<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Here\u2019s how verification of your logo happens:\n<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>The email server will take the URL specified in the \/ tag, which is where the logo is stored.<\/li><li>If the logo URL is found to be valid, then the server will take the location of the Verified Mark Certificate (VMC).<\/li><li>Next, the email server will check whether the certificate verifies the published logo. Upon successful verification of the logo, the email server accepts it and displays the logo next to the message in the recipient\u2019s inbox.<\/li><\/ul>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-getting-a-verified-mark-certificate\">Getting a Verified Mark Certificate<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Need a verified mark certificate to setup BIMI for your domain. Visit our Verified Mark Certificates page for more info:<\/p>\n\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link has-central-palette-1-background-color has-background\" href=\"https:\/\/www.thesslstore.com\/digicert\/verified-mark-certificate.aspx\" style=\"border-radius:5px\">View Verified Mark Certificates<\/a><\/div>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-the-significance-of-bimi-and-vmc\">The Significance of BIMI and VMC<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Emails are most fraudsters\u2019 No. 1 choice when it comes to fooling and baiting users. We\u2019ve seen many phishing scams that start with a simple email that claims to be an official email (but isn\u2019t) and end up putting the security of entire organization at risk. This is an area where BIMI and VMC can play a crucial part: <\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>As email providers display verified logos of companies, the distinction between real and spoof emails will be clearer, and this can help users identify and avoid scam emails.<\/li><li>Not only that, verified logos will enhance brand reputation and *could* lead to better results by improving brand visibility.<\/li><li>BIMI increases the incentive for companies to implement DMARC, which really helps email providers identify and reject imposter emails.<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"698\" height=\"419\" src=\"https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2019\/12\/BIMI-before-and-after.png\" alt=\"Before Bimi and After Bimi with Verified Mark Certificates\" class=\"wp-image-11875\" srcset=\"https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2019\/12\/BIMI-before-and-after.png 698w, https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2019\/12\/BIMI-before-and-after-300x180.png 300w, https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2019\/12\/BIMI-before-and-after-400x240.png 400w, https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2019\/12\/BIMI-before-and-after-460x276.png 460w\" sizes=\"auto, (max-width: 698px) 100vw, 698px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-is-bimi-currently-being-used\">Is BIMI Currently Being Used? <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Right now, BIMI is undergoing its pilot phase, which means many email service providers are testing it before its full-fledged use begins. Entrust Datacard issued the first Verified Mark Certificate on Aug 30, 2019, then in October <a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/www.digicert.com\/news\/digicert-issues-certificate-to-cnn-for-bimi-email-standard\/\" target=\"_blank\">DigiCert announced it had issued a Verified Mark Certificate for CNN.com.<\/a> Currently, Yahoo is testing a pilot of BIMI and Google is planning its own BIMI pilot in 2020. Soon, more major email service providers are expected to roll out support for BIMI and, as a result, it\u2019ll become an industry standard.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As always, leave your thoughts and questions in the comments!<\/p>\n\n\n<span style=\"--tl-form-height-m:861.156px;--tl-form-height-t:899.625px;--tl-form-height-d:899.625px;\" class=\"tl-placeholder-f-type-shortcode_12653 tl-preload-form\"><span><\/span><\/span>\n","protected":false},"excerpt":{"rendered":"<p>Learn about BIMI \u2014 a new email standard that could boost your email visibility, build customer trust, and help fight phishing If your job is related to email marketing, terms&#8230;<\/p>\n","protected":false},"author":10,"featured_media":11875,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":"","tve_updated_post":"","tve_custom_css":"","tve_user_custom_css":"","tve_globals":{},"tcb2_ready":0,"tcb_editor_enabled":0,"tve_landing_page":"","_tve_header":"","_tve_footer":""},"categories":[130,10200],"tags":[11581,11582],"class_list":["post-11873","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-everything-encryption","category-monthly-digest","tag-bimi","tag-verified-mark-certificates","post-with-tags"],"views":23295,"jetpack_featured_media_url":"https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2019\/12\/BIMI-before-and-after.png","_links":{"self":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/posts\/11873","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/comments?post=11873"}],"version-history":[{"count":0,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/posts\/11873\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/media\/11875"}],"wp:attachment":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/media?parent=11873"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/categories?post=11873"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/tags?post=11873"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}