<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>BIMI on Sender Audit Blog</title><link>https://senderaudit.com/blog/en/tags/bimi/</link><description>Recent content in BIMI on Sender Audit Blog</description><generator>Hugo</generator><language>en</language><lastBuildDate>Sun, 26 Apr 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://senderaudit.com/blog/en/tags/bimi/index.xml" rel="self" type="application/rss+xml"/><item><title>Email and DNS: Every Record You Need to Know</title><link>https://senderaudit.com/blog/en/email-and-dns/</link><pubDate>Sun, 26 Apr 2026 00:00:00 +0000</pubDate><guid>https://senderaudit.com/blog/en/email-and-dns/</guid><description>&lt;p&gt;DNS is the invisible foundation of email. Without the right records, your emails won&amp;rsquo;t be delivered, authenticated, or encrypted. Here are &lt;strong&gt;all the DNS records&lt;/strong&gt; a sending domain needs to know and configure.&lt;/p&gt;
&lt;h2 id="overview"&gt;Overview&lt;/h2&gt;
&lt;table&gt;
 &lt;thead&gt;
 &lt;tr&gt;
 &lt;th&gt;Record&lt;/th&gt;
 &lt;th&gt;Type&lt;/th&gt;
 &lt;th&gt;Role&lt;/th&gt;
 &lt;/tr&gt;
 &lt;/thead&gt;
 &lt;tbody&gt;
 &lt;tr&gt;
 &lt;td&gt;&lt;strong&gt;MX&lt;/strong&gt;&lt;/td&gt;
 &lt;td&gt;MX&lt;/td&gt;
 &lt;td&gt;Where to deliver emails for your domain&lt;/td&gt;
 &lt;/tr&gt;
 &lt;tr&gt;
 &lt;td&gt;&lt;strong&gt;SPF&lt;/strong&gt;&lt;/td&gt;
 &lt;td&gt;TXT&lt;/td&gt;
 &lt;td&gt;Who can send for your domain&lt;/td&gt;
 &lt;/tr&gt;
 &lt;tr&gt;
 &lt;td&gt;&lt;strong&gt;DKIM&lt;/strong&gt;&lt;/td&gt;
 &lt;td&gt;TXT/CNAME&lt;/td&gt;
 &lt;td&gt;Public key for verifying signatures&lt;/td&gt;
 &lt;/tr&gt;
 &lt;tr&gt;
 &lt;td&gt;&lt;strong&gt;DMARC&lt;/strong&gt;&lt;/td&gt;
 &lt;td&gt;TXT&lt;/td&gt;
 &lt;td&gt;SPF + DKIM alignment policy&lt;/td&gt;
 &lt;/tr&gt;
 &lt;tr&gt;
 &lt;td&gt;&lt;strong&gt;MTA-STS&lt;/strong&gt;&lt;/td&gt;
 &lt;td&gt;TXT + HTTPS&lt;/td&gt;
 &lt;td&gt;Enforce TLS encryption&lt;/td&gt;
 &lt;/tr&gt;
 &lt;tr&gt;
 &lt;td&gt;&lt;strong&gt;TLS-RPT&lt;/strong&gt;&lt;/td&gt;
 &lt;td&gt;TXT&lt;/td&gt;
 &lt;td&gt;Reports on TLS failures&lt;/td&gt;
 &lt;/tr&gt;
 &lt;tr&gt;
 &lt;td&gt;&lt;strong&gt;BIMI&lt;/strong&gt;&lt;/td&gt;
 &lt;td&gt;TXT&lt;/td&gt;
 &lt;td&gt;Verified logo in the inbox&lt;/td&gt;
 &lt;/tr&gt;
 &lt;tr&gt;
 &lt;td&gt;&lt;strong&gt;PTR&lt;/strong&gt;&lt;/td&gt;
 &lt;td&gt;PTR&lt;/td&gt;
 &lt;td&gt;Reverse DNS for your sending IPs&lt;/td&gt;
 &lt;/tr&gt;
 &lt;/tbody&gt;
&lt;/table&gt;
&lt;h2 id="mx-where-to-deliver-emails"&gt;MX: Where to Deliver Emails&lt;/h2&gt;
&lt;p&gt;The MX (Mail Exchange) record specifies which servers receive emails for your domain.&lt;/p&gt;</description></item><item><title>BIMI: Display Your Logo in Email Inboxes</title><link>https://senderaudit.com/blog/en/configure-bimi/</link><pubDate>Fri, 27 Feb 2026 00:00:00 +0000</pubDate><guid>https://senderaudit.com/blog/en/configure-bimi/</guid><description>&lt;p&gt;Have you noticed some senders display their logo next to emails in Gmail or Apple Mail? That&amp;rsquo;s &lt;strong&gt;BIMI&lt;/strong&gt; (Brand Indicators for Message Identification). Beyond branding, BIMI is a powerful trust signal, and it relies on flawless email authentication.&lt;/p&gt;
&lt;h2 id="what-is-bimi"&gt;What Is BIMI?&lt;/h2&gt;
&lt;p&gt;BIMI is an email standard that displays your brand logo directly in the recipient&amp;rsquo;s email client. But it&amp;rsquo;s not just cosmetic:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;Trust&lt;/strong&gt;: a verified logo increases recipient confidence&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Open rates&lt;/strong&gt;: studies show a 10-30% increase in opens&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Anti-spoofing&lt;/strong&gt;: BIMI requires DMARC at &lt;code&gt;quarantine&lt;/code&gt; or &lt;code&gt;reject&lt;/code&gt;, which blocks spoofing&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Brand visibility&lt;/strong&gt;: your logo appears before the message is even opened&lt;/li&gt;
&lt;/ul&gt;
&lt;h3 id="who-supports-bimi"&gt;Who Supports BIMI?&lt;/h3&gt;
&lt;table&gt;
 &lt;thead&gt;
 &lt;tr&gt;
 &lt;th&gt;Client / ISP&lt;/th&gt;
 &lt;th&gt;BIMI Support&lt;/th&gt;
 &lt;th&gt;VMC Required?&lt;/th&gt;
 &lt;/tr&gt;
 &lt;/thead&gt;
 &lt;tbody&gt;
 &lt;tr&gt;
 &lt;td&gt;Gmail&lt;/td&gt;
 &lt;td&gt;✅ Yes&lt;/td&gt;
 &lt;td&gt;✅ Yes&lt;/td&gt;
 &lt;/tr&gt;
 &lt;tr&gt;
 &lt;td&gt;Apple Mail (iOS 16+, macOS Ventura+)&lt;/td&gt;
 &lt;td&gt;✅ Yes&lt;/td&gt;
 &lt;td&gt;❌ No&lt;/td&gt;
 &lt;/tr&gt;
 &lt;tr&gt;
 &lt;td&gt;Yahoo / AOL&lt;/td&gt;
 &lt;td&gt;✅ Yes&lt;/td&gt;
 &lt;td&gt;❌ No&lt;/td&gt;
 &lt;/tr&gt;
 &lt;tr&gt;
 &lt;td&gt;La Poste&lt;/td&gt;
 &lt;td&gt;✅ Yes&lt;/td&gt;
 &lt;td&gt;❌ No&lt;/td&gt;
 &lt;/tr&gt;
 &lt;tr&gt;
 &lt;td&gt;Outlook&lt;/td&gt;
 &lt;td&gt;🔄 In progress&lt;/td&gt;
 &lt;td&gt;,&lt;/td&gt;
 &lt;/tr&gt;
 &lt;tr&gt;
 &lt;td&gt;Fastmail&lt;/td&gt;
 &lt;td&gt;✅ Yes&lt;/td&gt;
 &lt;td&gt;❌ No&lt;/td&gt;
 &lt;/tr&gt;
 &lt;/tbody&gt;
&lt;/table&gt;
&lt;blockquote&gt;
&lt;p&gt;Gmail is the only one requiring a VMC (Verified Mark Certificate). Others display the logo based solely on the DNS record.&lt;/p&gt;</description></item></channel></rss>