How do I validate BIMI records and fix common errors?
Summary
What email marketers say10Marketer opinions
Email marketer from OnlyMyEmail shares common BIMI errors include: incorrect DNS configuration, invalid SVG logo format (e.g., raster images saved as .svg), and issues with the VMC if required by the mailbox provider.
Email marketer from dmarcian recommends using a BIMI inspector to check the status of your BIMI record. They highlight you can use their free tool to check if your domain is set up correctly.
Email marketer from Mailhardener recommends using online BIMI record checkers to validate the syntax and presence of your BIMI record. These tools can help identify common errors such as incorrect DNS entries or malformed URLs.
Email marketer from Stack Overflow responds to check the following: DNS propagation, SVG format, and VMC validity. Also, make sure the BIMI record is correctly placed under the `_bimi` subdomain.
Email marketer from Email Marketing Forum says that if you're having trouble with your VMC, double-check that the issuing CA is trusted by the email provider you're targeting (e.g., Gmail).
Email marketer from Mailjet explains you need to set up SPF, DKIM and DMARC before BIMI. DMARC needs to be set to either 'quarantine' or 'reject'. Then you need to upload a validated SVG logo to a publicly accessible server and generate your BIMI DNS TXT record.
Marketer from Email Geeks explains that a certificate is not necessary with Verizon, but Gmail will want it.
Marketer from Email Geeks shares the most likely reason for logo failing to validate is that it was a .png and was simply put into the .svg container, but with BIMI it needs to be true .svg image.
Email marketer from EmailToolTester explains that BIMI enhances brand visibility in email inboxes. It also improves email security and deliverability by encouraging the adoption of email authentication protocols.
Email marketer from Reddit explains to ensure your SVG logo meets the BIMI specification, use an SVG validator tool. Common issues are non-square dimensions, embedded raster images, and incorrect XML structure.
What the experts say4Expert opinions
Expert from Word to the Wise explains that common SVG issues include incorrect sizing, not being a vector image, or accessibility problems. She also explains you should test across different email clients, as well as using validation tools.
Expert from Email Geeks answers that BIMI should exist at the root domain and you should add the root domain to the tools to test.
Expert from Spam Resource explains you can test your BIMI records with online validators, focusing on DNS settings, correct syntax and making sure the logo is HTTPS enabled.
Expert from Email Geeks explains the published DNS record should be located at: `default._bimi.client.com`.
What the documentation says6Technical articles
Documentation from BIMI Group explains that a BIMI record is a TXT record published in the DNS zone of your sending domain. The record specifies the location of your brand logo file and optionally the location of a Verified Mark Certificate (VMC).
Documentation from Let's Encrypt says to ensure that both your logo and VMC are served over HTTPS using a valid SSL certificate from a trusted Certificate Authority. You can use Let's Encrypt for free certificates.
Documentation from Entrust shares that a Verified Mark Certificate (VMC) is a digital certificate that authenticates your logo. VMCs are issued by authorized Certification Authorities (CAs) after verifying your trademark. Using a VMC allows your logo to be displayed in participating email clients.
Documentation from Proofpoint shares the correct syntax for a BIMI record is: `v=BIMI1; l=https://example.com/logo.svg; a=https://example.com/vmc.pem;`. Make sure the URLs are accessible over HTTPS.
Documentation from DigiCert shares the BIMI SVG logo must be a square aspect ratio, must be a vector graphic (SVG), must not contain any text, and must be accessible via HTTPS.
Documentation from GlobalSign explains that to implement BIMI effectively, ensure your domain is fully authenticated with SPF, DKIM, and DMARC. A DMARC policy of `p=quarantine` or `p=reject` is typically required.