for those interested in deploying BIMI, I wrote this HOWTO. > If the complexity of using BIMI exceeds your desire, you must at a minimum provide for one BIMI D

for those interested in deploying BIMI, I wrote this HOWTO. > If the complexity of using BIMI exceeds your desire, you must at a minimum provide for one BIMI DNS TXT record that tells everyone that your BIMI is “disabled” … just to prevent others from impersonating you. > The TXT record for a properly disabled BIMI must look like this: default._bimi.example.test. TXT "v=BIMI1; l=; a=;" While, I have said it is expensive and not recommended, it is there for those trying to understand BIMI. Also how to breakdown BIMI certificates too * https://egbert.net/blog/articles/smtp-bimi-howto.html https://egbert.net/blog/articles/smtp-bimi-howto.html * https://egbert.net/blog/articles/smtp-bimi-pki.html https://egbert.net/blog/articles/smtp-bimi-pki.html