Light

Episode #996 Quiz

BIMI (Up Scotty)
Date: 2024-10-15 | Length: 2.25 hrs | Episode page at twit.tv

About this episode

BIMI adds visually authenticated sender logos to email, but only after SPF, DKIM, and enforced DMARC all succeed. Mailbox providers then verify a BIMI record and certificate, often via DigiCert or Entrust, plus logo authorization through trademark or historical-use evidence, a DNS proof, and sometimes Wayback Machine verification of usage.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: According to Steve's description of his uBlock Origin setup, which filter-list category did he enable to suppress the unsolicited Google sign-in prompts without relying only on a custom My Filters rule?

Question 1

According to Steve's description of his uBlock Origin setup, which filter-list category did he enable to suppress the unsolicited Google sign-in prompts without relying only on a custom My Filters rule?

Privacy Annoyances Social Widgets Malware

Question 2: What had to happen before DigiCert would complete the final verification step for Steve's BIMI certificate, and what service was supposed to be used to verify it?

Question 2

What had to happen before DigiCert would complete the final verification step for Steve's BIMI certificate, and what service was supposed to be used to verify it?

The mark had to be trademarked, and a patent office search had to confirm it The logo had to be shown on archived pages, and the Wayback Machine had to confirm it The certificate had to be reissued, and a browser vendor had to approve it The domain had to resolve through DNSSEC, and a registrar lookup had to confirm it

Question 3: Which pair of requirements did Steve say were necessary for BIMI display to proceed after DMARC, according to the certificate process he described?

Question 3

Which pair of requirements did Steve say were necessary for BIMI display to proceed after DMARC, according to the certificate process he described?

MTA-STS and DANE SPF and DKIM TLS and OCSP S/MIME and PGP

Question 4: What did DigiCert require Steve to prove during the BIMI certificate process that went beyond merely showing corporate control of the domain and the logo file?

Question 4

What did DigiCert require Steve to prove during the BIMI certificate process that went beyond merely showing corporate control of the domain and the logo file?

His personal identity matched the corporate record His website used HTTPS on every page His mail server supported IPv6 delivery His organization had a published security policy

Question 5: Which specific certificate authorities did the BIMI FAQ identify as Mark Verifying Authorities for issuing VMCs at the time Steve reviewed it?

Question 5

Which specific certificate authorities did the BIMI FAQ identify as Mark Verifying Authorities for issuing VMCs at the time Steve reviewed it?

DigiCert and Entrust Cloudflare and Amazon GlobalSign and Comodo Sectigo and Let's Encrypt

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.