Sign in
  • Home
  • Products
    • Enforce
    • DMARC Monitor
    • Instant SPF
    • Amplify
  • Solutions
    • Anti-phishing
    • Brand protection
    • Compliance
    • Government
    • Marketing
    • Microsoft
    • Shadow IT
  • About
    • News + awards
    • Partners
    • Team
    • Careers
    • Industry leadership
    • Customer support
  • Learn
    • Resources
    • Blog
    • Customers
  • Support
Request phishing analysis
  • Products
    • Enforce
    • DMARC Monitor
    • Instant SPF
    • Amplify
  • Solutions
    • Anti-phishing
    • Brand protection
    • Compliance
    • Government
    • Marketing
    • Microsoft
    • Shadow IT
  • About
    • News + awards
    • Partners
    • Team
    • Careers
    • Industry leadership
    • Customer support
  • Learn
    • Resources
    • Blog
    • Customers
  • Get started for free
  • Support
  • Sign in
Check to see if you’re protected
☰
Check to see if you’re protected
Share this article
Related posts
  • Blog
    Research: Only 22 of the top 100 retailers are protected by DMARC
  • Blog
    DMARC authentication gets you the deliverability you deserve
  • Blog
    How vulnerable are U.S. election operations to email spoofing?
Valimail blog

Valimail salutes Google for its support of BIMI

Author: Valimail
Lower part of a boy in casual shoe walking up outdoor colorful staircase,children lifestyle successful concept

Google announced today that it will be launching a pilot for BIMI (Brand Indicators for Message Identification), a new email specification, in Gmail.

This is a major step forward for user experience and security in the world of email.

At Valimail, we’re especially excited for this new phase in the maturation of the BIMI specification. Valimail has a deep and longstanding commitment to advancing and upholding open standards that benefit the entire ecosystem, such as BIMI. We have been involved in the development of BIMI for years now. Our co-founder and CEO Alexander García-Tobar was one of the co-founders of the working group creating BIMI, and our VP of standards and new technologies, Seth Blank, is currently its chair.

BIMI provides a standardized way for a domain owner to publish their logo in DNS, so mailbox providers can use that logo alongside any authenticated emails that they receive from that domain. Instead of a generic letter or in the mailbox provider’s best guess at your logo, BIMI allows you to securely transmit your brand’s exact logo alongside your message, providing a more immersive experience for your customers.

BIMI is important because it incentivizes the entire ecosystem to adopt email authentication at enforcement, which will make email more secure and more trustworthy for all internet users.

That’s because there’s an essential prerequisite to using BIMI: The standard requires that brands use DMARC with an enforcement policy, covering their organizational domain and all subdomains.

As Vailmail’s Seth Blank states in Google’s blog, “For organizations that want to create a trusted brand presence over email, BIMI is a great opportunity, incentivizing them to implement strong authentication, which in turn will lead to a safer, more trusted email ecosystem for everyone.”

In addition, Gmail is requiring that domain owners adopt the highest level of validation defined in the spec by securing a Verified Mark Certificate (VMC), also known as a “BIMI certificate,” to validate the authenticity of their logos. The Google pilot is the first to use VMCs to validate logos, which advances the security of the standard and helps prevent spoofing. VMCs can be obtained from participating certification authorities (CAs), including Entrust Datacard and DigiCert, which recently announced a partnership with Valimail, to provide an easy way for companies to get BIMI-ready.

In short, BIMI gives domain owners a huge incentive to make their sending domains more secure. That in turn decreases the likelihood of phishing emails spoofing their brands, because it eliminates a major type of impersonation: The exact-domain spoof.

We welcome this development and look forward to the results of Gmail’s pilot — and we are hopeful that BIMI will become widely adopted in the near future.

Valimail also offers several resources to help domain owners get ready for BIMI:

  • Valimail’s free BIMI readiness checker tells you, in seconds, whether your domain is BIMI-ready, and what exactly you must do in order to get BIMI-ready.
  • Our DMARC Monitor product (also free) provides industry-leading DMARC monitoring and visibility capabilities, helping domain owners configure and manage their DMARC records and get to enforcement faster than they can with any other vendor.

In addition, we’ve got a wealth of informative material on getting ready for BIMI.

  • Read our blog post on how to create a BIMI-compatible logo.
  • Check out our overview of how to implement BIMI.

And sign up for our free BIMI readiness kit, which is packed with resources on implementing DMARC, getting to DMARC enforcement, and other things you need to get ready for BIMI.

Get ready for BIMI
Back to blog
Published July 21, 2020
  • BIMI
  • Google
Author: Valimail
Valimail is the global leader in zero-trust email security. The company’s full line of cloud-native solutions authenticate sender identity to stop phishing, protect brands, and ensure compliance; they are used by organizations ranging from neighborhood shops to some of the world's largest organizations, including Uber, Splunk, Yelp, Fannie Mae, Mercedes Benz USA, and the U.S. Federal Aviation Administration. Valimail is the fastest growing DMARC solution, with the most domains at DMARC enforcement, and is the premier DMARC partner for Microsoft 365 environments. For more information visit www.valimail.com.
Resources
Top retailers remain vulnerable to email brand spoofing
Learn more
Email security with Microsoft and Valimail
Learn more
Election email security
Learn more
Email fraud landscape, Summer 2020
Learn more
Preparing for BIMI: A Marketer’s Guide
Learn more
Latest news
Trump’s refusal to concede the election is creating an opening for cy...
Learn more
2020 General Election Results to Directly Impact Tech Industry
Learn more
Why Email Is Still an Election Day Disinformation Risk
Learn more
US elections are still vulnerable to email spoofing
Learn more
Security Gaps Persist, Report Warns, After U.S. Blames Iran In Election Sch...
Learn more
Press releases
Valimail Triples Customer Base, Becomes Top Global DMARC Provider in 2020
Learn more
Valimail: 2020 election infrastructure still vulnerable to email hackers
Learn more
Valimail Announces Selection by ASG for Anti-Phishing and BEC Protection
Learn more
Valimail DMARC Monitor and Valimail Enforce Now Available in the Microsoft ...
Learn more
Valimail Research Finds More Than 1 Million Domains Using Crucial Email Aut...
Learn more
Follow us
Contact us

P: 888.354.6179
E: info@valimail.com

Headquarters

180 Montgomery Street
20th Floor
San Francisco, CA 94104

Valimail Mountain Office

1550 Larimer Street
Suite 271
Denver, CO 80202

Request a full phishing analysis
© Valimail
  • Terms of use
  • Privacy Policy
  • Website terms of use
  • Do not sell my personal information
  • Phishing Analysis
  • Domain Checker
  • Products
  • Enforce
  • DMARC Monitor
  • Instant SPF
  • Amplify
  • Solutions
  • Anti-phishing
  • Brand protection
  • Compliance
  • Government
  • Marketing
  • Microsoft
  • Shadow IT
  • About
  • News + awards
  • Partners
  • Team
  • Careers
  • Industry leadership
  • Customer support
  • Learn
  • Resources
  • Blog
  • Customers