DigiCert to support new standard requiring validated logos through the pilot phase, production
LEHI, Utah (October 10, 2019) – DigiCert, Inc., the world’s leading provider of TLS/SSL, IoT and PKI solutions, today announced that it has issued the world’s first Verified Mark Certificate (VMC) for a domain that sends email at scale: CNN.com. With this certificate, CNN is the first company prepared to participate in upcoming pilots of the BIMI (Brand Indicators for Message Identification) standard that require validated logos.
A VMC is a new type of digital certificate that proves the authenticity of a logo tied to an email sender’s domain. VMC certificates are not currently in use in BIMI pilots, but they are expected to become a requirement because they are a scalable way to ensure that corporate logos are not used fraudulently. Businesses have long sought ways to better identify themselves to customers in emails, and VMC certs for BIMI will enable verified brand marks to be displayed.
Yahoo Mail is currently running a pilot of BIMI; Google is planning its own BIMI pilot in 2020, though it has not provided specific timing or commented on whether VMC would be required. Other email providers are also expected to begin their own BIMI implementations in the coming year.
“CNN’s adoption of BIMI with VMC is a game-changing development for the email ecosystem and demonstrates CNN’s technical leadership,” said Seth Blank, director of industry initiatives for Valimail and chair of the AuthIndicators Working Group, which is developing the BIMI standard. “We commend DigiCert for helping to lay the groundwork for this important enhancement of internet email. The AuthIndicators Working Group is excited for many more brands to follow CNN’s leadership.”
“DigiCert is excited to work with CNN and members of the AuthIndicators Working Group to take this first step in demonstrating the feasibility and benefit of VMCs for global brands under the BIMI pilot program,” said DigiCert Chief of Product Jeremy Rowley. “We know that there is a demand for issuing VMCs at scale and we are fully committed to providing that capability.”
“It’s amazing to see the progress that BIMI has made in the last few years, and the ability to validate logos using VMC is a tremendous step forward,” said Alexander García-Tobar, the CEO and co-founder of Valimail, a leading provider of VMC-enabled BIMI services for domains. García-Tobar is also a co-founder of the AuthIndicators Working Group. “Valimail is committed to supporting BIMI and VMC in the industry as well as our own products, and we are excited to work with DigiCert on this important enhancement to email technology.”
BIMI is a new standard that provides a secure, global framework enabling email inboxes to display sender-designated logos for authenticated messages. It allows domain owners to specify a logo that will appear in the inbox, alongside authenticated email messages sent from their domains.
BIMI will work only when both the email and the logo are properly validated. The email must be authenticated through the Domain-based Message Authentication, Receiving & Conformance (DMARC) standard with a policy of quarantine or reject; the logo itself will be validated by the VMC.
The VMC certificate issued by DigiCert for CNN.com is the first such certificate for a domain used to send email to consumers at high volumes. This certificate puts CNN – which has already been authenticating its domain with DMARC – in an “all systems go” position for participating in BIMI pilots that utilize VMC next year.
With widespread use of VMC, BIMI, and DMARC, brands will be able to amplify their online presence in the inbox through authenticated messages to consumers that are instantly recognizable through known, protected brand marks.
DigiCert is ready to assist customers with pilot projects now and plans to have VMC certificates integrated into its DigiCert CertCentral platform by early 2020. For more information on how to participate in the pilot, please visit https://bimigroup.org/ or valimail.com/amplify.
About DigiCert, Inc.
DigiCert is the world’s leading provider of scalable TLS/SSL, PKI solutions for identity and encryption. The most innovative companies, including 89 percent of Fortune 500 companies and 97 out of the 100 top global banks, choose DigiCert for its expertise in identity and encryption for web servers and Internet of Things devices. DigiCert supports TLS/SSL and other digital certificates for PKI deployments at any scale through its certificate lifecycle management platform, CertCentral®. The company is recognized for its enterprise-grade certificate management platform, fast and knowledgeable customer support, and market-leading security solutions. For the latest DigiCert news and updates, visit digicert.com or follow @digicert.