Making sure that you have a secure experience by default that is based on solid defenses has been a fundamental design concept for Gmail. It is why we've created the highest level of security within Gmail and built-in security features to filter out messages that could be malicious automatically. In addition, these safeguards help to keep Gmail users secure. Email is an integral part of a complex, interconnected system that we continuously invest in and safeguard. Following the announcement of Gmail's Brand Indicators for Message Recognition (BIMI) pilot in the year 2000, We're pleased to announce that in the next few weeks, we'll be rolling out Gmail's support for BIMI, which is an industry-standard that is designed to encourage the adoption of solid sender authentication across the entire email system. BIMI gives email recipients and security systems greater confidence in the authenticity of email messages and allows users to provide their customers with an enhanced experience.
“Bank of America offers many security measures that are in place to help our customers. We continuously improve our security program to offer the highest level of security. One of these measures is our collaboration in partnership with Google on BIMI which gives customers an easy method of confirming the authenticity of correspondence directly from Bank of America.” — Bank of America
BIMI lets organizations authenticate their emails with Domain-based Message Authentication and Reporting Conformance (DMARC)–a standard that provides secure sender authentication that lets security systems be more effective in filtering and separating legitimate emails from fake ones. In addition, it allows them to validate that their logos are legitimate and securely transfer them to Google. BIMI has been designed to make it easy for organizations that have DMARC in place; verified logos are displayed on authenticated emails sent from the domains and subdomains.
It is the way it's done: Companies that authenticate their email using Sender Policy Framework (SPF) or Domain Keys Identified Mail (DKIM) and implement DMARC can present their validated trademarked logos Google through the Verified Mark Certificate (VMC). BIMI utilizes Mark Verifying Authorities, like Certification Authorities, to verify the ownership of logos and provide proof of ownership within the form of a VMC. Gmail will start displaying the logo in the current avatar slot when the verified emails have passed our other checks for abuse.
“Gmail's support for BIMI is a win-win in the realm of email security, trustworthiness and customers as well. BIMI allows organizations to offer their customers more of an experience with email and strengthens the authentication of email senders over the whole email industry.” -Seth Blank, Chair of the AuthIndicators Working Group. Seth Blank, Chair of the AuthIndicators Working Group
It is just the beginning for BIMI. The standard will expand support for all types of logos and validators. To ensure logo validity, BIMI starts by accepting trademarked logos since they are often the target of impersonation. In the present, Entrust and DigiCert support BIMI as Certification Authorities. Shortly, it is expected that the BIMI working group is expecting the list of validated authorities to be expanded. To find out more about BIMI and get the latest news, go to the working group's website.
To make use of BIMI, Make sure your business has implemented DMARC and has verified your logo using a VMC. For Gmail users, there is no requirement to take action. We're proud to be among the top members of both the BIMI standard and advancing the BIMI standard. We will continue to assist initiatives that enhance the security of all users of email.
Original source: https://medium.com/@rawatnimisha/advancing-email-security-for-gmail-and-beyond-with-bimi-2992be42066
0
