BIMI Requires an Enforced DMARC Policy
The domain publishes a BIMI record but its DMARC policy is not at enforcement.
Severity: Medium
What does this mean?
Your domain publishes a BIMI record, but its DMARC policy is not at enforcement. BIMI (Brand Indicators for Message Identification) lets your logo appear alongside your mail in supporting mailbox providers, but only when DMARC is enforced — that is, set to p=quarantine or p=reject. With DMARC at p=none, mailbox providers ignore the BIMI logo entirely.
This issue is raised by DNS Watchdog's background BIMI scan. You can also run an on-demand check with the BIMI Validator.
Why this is a problem
Enforced DMARC is a prerequisite for BIMI. Until your policy reaches enforcement, the effort of publishing a BIMI record produces no visible result, because no provider will display the logo. It also means your domain is not yet protected by an enforcing DMARC policy against spoofing.
What you should do
- Move your
_dmarcpolicy top=quarantineorp=reject - Confirm your legitimate mail is aligned before enforcing, so genuine mail is not affected
- Re-run the BIMI Validator once the policy is enforced