Files
LambdaMail/services/protocols/internal/domain/bimi/testdata
Lucas RayanandClaude Sonnet 5.5 dabd1568d1 feat(bimi): logo studio, certificate upload and a setup check in the console
The console took pasted SVG text and a URL. It now:

- takes a PNG or SVG and makes the logo BIMI accepts (SVG Tiny PS, square,
  at most 32 KB). An SVG has what the format forbids removed and is told what;
  a PNG is traced into vectors in the browser (imagetracerjs, public domain),
  walking down quality presets until it fits. The person positions it as in the
  photo editor: drag, zoom, background colour, preview in a circle or rounded
  square, and downloads the exact SVG to give a certificate authority
- holds the .pem the authority returns, validated against the logo and domain,
  and serves it at /.well-known/bimi/vmc.pem (routed by the webmail)
- shows the DNS record and runs the setup check (logo, DMARC, record, public
  URLs, certificate)
- a golden-file contract: the SVGs the studio produces are validated by the
  server's own validator (Go) and pinned by the studio's tests (TS)
- found by those tests: an element inside a link kept its onclick when the
  link was unwrapped; links are now unwrapped before cleaning
- the BIMI and photo texts are in Brazilian Portuguese with accents (they had
  been written without), and in Spanish with accents

A VMC cannot be generated from an image: it is issued by a certificate
authority. The README and the panel say so.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
2026-10-16 17:04:35 -03:00
..

Real Verified Mark Certificates, used only to test the parser.

Both are public: a BIMI certificate is published on purpose at the URL in the a= tag of the sender's default._bimi DNS record, so that any mail provider can fetch it.

Files Published by Fetched from
ebay.pem, ebay.svg eBay, issued by DigiCert default._bimi.ebay.com (2026-10-16)
cnn.pem, cnn.svg CNN, issued through Valimail default._bimi.cnn.com (2026-10-16)

The tests pin the clock to 2026-10-16, inside both validity periods. They hold the format the parser has to read: a leaf certificate with the "Brand Indicator for Message Identification" extended key usage and a logotype extension whose data URI is the logo, gzipped and base64 encoded.