4 ms·
BIMI is useless. SPF and DKIM are flawed. DMARC is a patch on top of SPF and DKIM. If you want to be able to trust email, you need a trustworthy PKI. If you
by dsr_ 2y ago
BIMI is useless.
SPF and DKIM are flawed.
DMARC is a patch on top of SPF and DKIM.
If you want to be able to trust email, you need a trustworthy PKI. If you want to communicate with people who don't or can't participate in the PKI, you need a mail client that rigorously and clearly distinguishes the anonymous from the verifiable.
Given the existence of two parallel email systems, some people will run gateways that create artificial verification of non-verifiable messages. Now you need to figure out reputations for all the gateways.
In the end, you always end up with spam and forgeries.
- throwaway984393 2y ago[dead]
- brightball 2y ago100%. BIMI is the carrot for the marketing department to get on board with the DMARC project while giving the same people who sold you EV-SSL something else to sell you. But this is a solid explanation of a DKIM issue that should be simple enough to avoid. Good write up.
- egberts1 2y agoBIMI gives you ONLY logo spreading of your choice. BIMI, marketers' dream. BIMI, yours for only $999.99 per year. Just for $999.99, you too could enjoy stuffing Ensure's pocket too!
- Avamander 2y agoI think BIMI works well as a motivator and spotlight to bring attention to these issues. I also think your average user won't mind it. Implementing it as a receiver is full of pitfalls, as we can see.
- detourdog 2y agoI was thinking this was the next step for me and mail server. https://www.validity.com/blog/how-to-explain-authenticated-received-chain-arc-in-plain-english/ https://www.validity.com/blog/how-to-explain-authenticated-r...