4 ms·
How is BIMI "monopolizing"? It's a trivial DNS record.
by Avamander 4y ago
How is BIMI "monopolizing"? It's a trivial DNS record.
- teddyh 4y agohttps://news.ycombinator.com/item?id=28196403 https://news.ycombinator.com/item?id=28196403
- Avamander 4y agoThere's the catch - VMCs are not a mandatory part of BIMI. Though if you want to establish trust, someone has to be willing to put their name on the line and verify everything required. If you have a better approach in mind, I'm sure a lot of people would love to know.
- teddyh 4y agoTrust (by way of VMC) is the whole point of BIMI; it’s what’s in all the marketing copy: The fact that nobody else can send mail with your logo. If you merely wanted to send e-mail with your icon on it, that already existed: the X-Face header has been around for decades.
- Avamander 4y agoAbsolutely not, BIMI is a way to provide brand identity for recognition/marketing purposes. Trust or security is not the standard's goal. Being able to trust the logo is an optional extra. Also nobody really uses X-Face, it's irrelevant.
- teddyh 4y agoYou’re talking nonsense. What is the improvement of BIMI (without VMC) over X-Face? The only things I can think of are: 1. BIMI logos are in color. oh yeah, and: 2. BIMI logos are inherently a tracking pixel so the sender can see when readers read the mail.
- Avamander 4y agoYou are free to read the BIMI standard's section 2.1 containing its high-level goals. The next section also literally says "This document does not cover the different verification and reputation mechanisms available, but BIMI relies upon them to be in deployed in order to control abuse." It's not a standard meant for establishing trust, it does not mandate requiring a VMC.
- teddyh 4y agoJust like with e-mail, it doesn’t matter what’s in the standard, what matters is what the big providers actually do. If Google (Gmail), Microsoft, etc. will simply show any BIMI logo without VMC verification (which will never happen), then I will concede that BIMI is not a monopolizing standard. It’ll just be a tracking pixel.
- Avamander 4y agoShowing any BIMI logo is an absolutely unreasonable thing to demand from a large-scale BIMI implementation. It does not make it "monopolizing", I don't think you even know what the word means.
- teddyh 4y agoSo VMC isn’t optional?
- Avamander 4y agoIs it that difficult to grasp that there's a "depends" option between "optional" and "not optional"? Nobody really forces you to use HTTPS either, it's not a "monopolizing" standard if someone doesn't trust you without. And again, if you have a way of establishing just as much trust without such a labour-intensive/expensive verification process, please do share.
- 4y ago