BIMI record

default._bimi.paypal.com. 300 IN TXT "v=BIMI1; l=https://www.paypalobjects.com/marketing/web/logos/paypal_ppe.svg; a=https://www.paypalobjects.com/marketing/web/logos/PPE_UK_DE_paypal_inc.pem"
  ; BIMI logo record, with a mark certificate (a=)

default._bimi.ebay.com. 2251 IN TXT "v=BIMI1;l=https://vmc.digicert.com/9e57aa28-3230-463f-b92e-ba8cd5612c17.svg;a=https://vmc.digicert.com/9e57aa28-3230-463f-b92e-ba8cd5612c17.pem"
  ; BIMI logo record, with a mark certificate (a=)

default._bimi.apple.com. 1800 IN TXT "v=BIMI1;l=https://www.apple.com/bimi/v2/apple.svg;" "a=https://www.apple.com/bimi/v2/apple.pem;"
  ; BIMI logo record, with a mark certificate (a=)

default._bimi.cnn.com. 1800 IN TXT "v=BIMI1; l=https://amplify.valimail.com/bimi/time-warner/R4Ezf5xK5ac-CNN.svg; a=https://amplify.valimail.com/bimi/time-warner/R4Ezf5xK5ac-CNN.pem"
  ; BIMI logo record, with a mark certificate (a=)

What the BIMI record does

Receivers look up default._bimi.<From domain> (or another selector named in a BIMI-Selector header), and fall back to the organizational domain. The record points at an SVG logo in the restricted SVG Tiny Portable/Secure profile, and optionally at a PEM certificate that proves the right to use the mark.

The domain must be at DMARC enforcement: p=quarantine or p=reject, pct=100, and no sp=none. Gmail and Apple Mail only display logos backed by a Verified Mark Certificate (VMC, for a registered trademark) or a Common Mark Certificate (CMC). Yahoo also shows logos without a certificate for senders with a good reputation.

Zone-file syntax

default._bimi.example.com.  3600  IN  TXT  "v=BIMI1; l=https://example.com/bimi/logo.svg; a=https://example.com/bimi/vmc.pem"

Wire format: A TXT record. Both URLs must be HTTPS.

Fields

Field	Meaning
v	BIMI1, first.
l	HTTPS URL of the SVG Tiny P/S logo. Empty declines to show a logo.
a	HTTPS URL of the PEM certificate chain (VMC or CMC). Empty or absent means self-asserted.

Common mistakes

• DMARC still at p=none; BIMI is ignored.
• A normal SVG export instead of SVG Tiny P/S (needs baseProfile="tiny-ps", a title, no scripts or external references).
• A logo that is not square or has a transparent background, which providers crop into a circle badly.

Specification

• draft-brand-indicators-for-message-identification (IETF Internet-Draft; not yet an RFC)

Related record types

• DMARC: policy and reporting for the From domain
• DKIM: the public key behind email signatures
• SPF: which servers may send mail for a domain

All DNS record types