The console took pasted SVG text and a URL. It now: - takes a PNG or SVG and makes the logo BIMI accepts (SVG Tiny PS, square, at most 32 KB). An SVG has what the format forbids removed and is told what; a PNG is traced into vectors in the browser (imagetracerjs, public domain), walking down quality presets until it fits. The person positions it as in the photo editor: drag, zoom, background colour, preview in a circle or rounded square, and downloads the exact SVG to give a certificate authority - holds the .pem the authority returns, validated against the logo and domain, and serves it at /.well-known/bimi/vmc.pem (routed by the webmail) - shows the DNS record and runs the setup check (logo, DMARC, record, public URLs, certificate) - a golden-file contract: the SVGs the studio produces are validated by the server's own validator (Go) and pinned by the studio's tests (TS) - found by those tests: an element inside a link kept its onclick when the link was unwrapped; links are now unwrapped before cleaning - the BIMI and photo texts are in Brazilian Portuguese with accents (they had been written without), and in Spanish with accents A VMC cannot be generated from an image: it is issued by a certificate authority. The README and the panel say so. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Real Verified Mark Certificates, used only to test the parser.
Both are public: a BIMI certificate is published on purpose at the URL in the
a= tag of the sender's default._bimi DNS record, so that any mail provider
can fetch it.
| Files | Published by | Fetched from |
|---|---|---|
ebay.pem, ebay.svg |
eBay, issued by DigiCert | default._bimi.ebay.com (2026-10-16) |
cnn.pem, cnn.svg |
CNN, issued through Valimail | default._bimi.cnn.com (2026-10-16) |
The tests pin the clock to 2026-10-16, inside both validity periods. They hold the format the parser has to read: a leaf certificate with the "Brand Indicator for Message Identification" extended key usage and a logotype extension whose data URI is the logo, gzipped and base64 encoded.