In recent times, Google is talking about Brand Indicators for Message Identification (BIMI), which includes adding an MX Record, a SPF Record, a DMARC Record, and a BIMI Record. Adding an MX Record, an SPF Record and a DMARC Record is free and we have discussed the technical part on our website in the past – How to add DKIM, SPF Record, DMARC Record.
Activate the records, if you have already not used them. They add security features to your emails and are completely free to use. Next, test your domain for these records using this online tool:
1 | https://bimigroup.org/bimi-generator/ |
For example, this is our domain’s test result:
---
We have the BIMI record (without the PEM certificate), and the other records are compliant. Hence we do not have the logo on all email clients, and blue tick mark is absent. Performing the steps up to this is recommended for preventing spoofing, spam etc. It will help with email delivery rate (avoiding getting in the spam folder) unless you spam.
This is India’s one private bank’s (axisbank.com
) test result:
axisbank.com
has a fully compliant BIMI record with the PEM certificate. You’ll see that the SVG logo is hosted on a CA server:
https://bimi.entrust.net/axisbank.com/logo.svg
How to Add BIMI Record and Get Brand Logo, Blue Tick to Emails
That is time taking and costly affair. First, you need your logo to be made a trademark. This is usually a government service, helped by private agencies, and the cost is not super high. It is recommended to have the trademark filed if your website is valuable.
Please note that, if you want to test (like we have done) without the PEM certificate from CA, you can use your existing logo skipping the trademark registration part. However, the logo must be yours i.e. it must be created or purchased by you/your business.
You can search the record for trademark on the World Intellectual Property Organization’s (WIPO) website (https://branddb.wipo.int/branddb/en
). Only a few trademark offices are approved for this purpose:
Supported by both Entrust and Digicert:
- United States Patent and Trademark Office (USPTO),
- Canadian Intellectual Property Office,
- European Union Intellectual Property Office,
- UK Intellectual Property Office,
- Deutsches Patent- und Markenamt,
- Japan Trademark Office,
- Spanish Patent and Trademark Office O.A.,
- IP Australia.
Supported by Digicert (plus the above list):
- Korean Intellectual Property Office
- Instituto Nacional da Propriedade Industrial (Brazil)
- Intellectual Property India
Trademark filing cost is not very high in India, it is around $60 for small companies. Within $100, you’ll get the trademark employing an agency. Naturally, it is 4 times in the US (around $400) because of the actual value of the currency in its own country.
The next part is the barrier for smaller brands and small businesses. Only Entrust and DigiCert issue the required digital certificate (it is like an EV SSL certificate) and the cost is a whooping $1500 per year.
If you got the certificate, then you can add the DNS TXT record for BIMI with these pattern of record:
1 2 3 | Hostdefault._bimi.example.com Valuev=BIMI1;l=https://images.example.com/brand/bimilogo.svg;a=https://images.example.com/brand/certificate.pem TTL1 hour (3600 seconds) |
Without the certificate from Entrust or Digicert, the record will be like this:
1 2 3 | Hostdefault._bimi.example.com Valuev=BIMI1;l=https://images.example.com/brand/bimi-logo.svg TTL1 hour (3600 seconds) |
You can do this one like we did and got passed the BIMI Record test:
Here are the resources to create/convert the SVG logo:
1 2 3 | https://bimigroup.org/svg-conversion-tools-released/ https://github.com/authindicators/svg-ps-converters/tree/master/gui-win10 https://support.google.com/a/answer/10911027?sjid=10484868166515991890-AP |
Google has written in their documentation that “It can take up to 48 hours for BIMI to start working”.
Further reading of specification:
1 | https://datatracker.ietf.org/doc/draft-brand-indicators-for-message-identification/ |