DMARC is not enforced strongly enough for BIMI.

BIMI_DMARC_NOT_ENFORCED · Severity: Warning

• WarningBIMI_DMARC_NOT_ENFORCED

  DMARC is not enforced strongly enough for BIMI.

  BIMI requires a DMARC policy of quarantine or reject that applies to all mail (pct=100), and the subdomain policy must not be none. Mail clients do not show the logo otherwise.

  Recommendation: Tighten DMARC only after its reports show that all legitimate mail passes; the DMARC guide explains the steps.

Reported by

• Domain health check
• BIMI record check

Available through the API

• Domain health check API
• BIMI record check API

Related findings

• Warning BIMI_INSECURE_URL A BIMI URL does not use HTTPS.
• Error BIMI_INVALID_RECORD The BIMI record is not valid.
• Warning BIMI_LOGO_NOT_SVG The BIMI logo URL does not point to an SVG file.
• Info BIMI_NOT_FOUND The domain publishes no BIMI record.
• Info BIMI_NO_VMC The BIMI record has no mark certificate (a= tag).

All findings