search

mail-in-a-box / mailinabox

Mail-in-a-Box helps individuals take back control of their email by defining a one-click, easy-to-deploy SMTP+everything else server: a mail server in a box.
https://mailinabox.email/
Creative Commons Zero v1.0 Universal
13.82k stars 1.42k forks source link

Brand Indicators for Message Identification #2238

Open JJJ opened 1 year ago

JJJ commented 1 year ago

Checked the forums & Mastodon, but didn't see any official feature request here.

"BIMI" leverages the work an organization has put into deploying DMARC protection, by bringing brand logos to the customer’s inbox. For the brand’s logo to be displayed, the email must pass DMARC authentication checks, ensuring that the organization’s domain has not been impersonated.

It is, in a nutshell 🥜, Gravatar for email.

More: https://bimigroup.org

Implementation: https://bimigroup.org/implementation-guide/

I can imagine an extra dashboard page, modal, generic screen for uploading & validating "SVG Tiny PS" formatted images for each domain/alias similar to the certs or custom DNS pages, as well as a BIMI warning similar to when DNSSEC DS records are not set:

jjj-on-2023-02-23-at-15-04-23@2x
kiekerjan commented 1 year ago

Although it is pretty easy to add support for BIMI yourself (just add a custom DNS record as described in step 4 of your guide) I would image there is not a lot of request for this feature. The required certificates (VMC) are rather expensive...

fm commented 1 year ago

Also, you'd need an MUA that displays BIMI certs and a milter that parses the BIMI records - which I don't believe roundcube does, nor spamassasin does (but rspamd has a BIMI parser).

Edit: the requirements above would be for MIAB to display BIMI logos, not to deploy BIMI on your own domain.

matidau commented 1 year ago

It looks like someone is working in a plugin for roundcube. https://github.com/roundcube/roundcubemail/issues/8143