Sending domain and authentication Optional
Show your logo with BIMI
Once DMARC is enforced, publish a BIMI record, so supporting inboxes show your verified logo next to your mail.
How to do it
BIMI needs DMARC at p=quarantine or p=reject on the organisation domain. Publish the logo as an SVG Tiny PS file over HTTPS. Gmail and Apple Mail also need a Verified Mark Certificate for a registered trademark, or Gmail a Common Mark Certificate. The BIMI Group publishes the format.
Example
default._bimi.example.com. 3600 IN TXT "v=BIMI1; l=https://example.com/bimi/logo.svg; a=https://example.com/bimi/vmc.pem"
How to check
dig +short TXT default._bimi.example.com returns the record. A BIMI checker validates the SVG and certificate, and a test message shows the logo in Gmail.
For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers email playbook: https://agentwranglers.se/playbook/email/sending-domain-and-authentication/bimi.