Verified Mark Certificates (VMCs) are a key component of BIMI (Brand Indicators for Message Identification), an email authentication standard aimed at enhancing email security and brand recognition in the inbox. A Verified Mark Certificate is a cryptographic token issued by a trusted Certificate Authority (CA) that validates the association between a brand's logo and its domain. The primary purpose of VMCs is to enable email clients and inbox providers to securely display brand logos alongside authenticated emails. To obtain a VMC, a brand must go through a verification process to prove ownership of the domain and the associated brand logo. Once verified, the CA issues a VMC that is installed on the brand's servers and used to sign outgoing emails.
When a recipient's email client receives an email with a VMC-signed logo, it verifies the authenticity of the logo using the VMC and displays it alongside the email. This provides recipients with a visual indicator of the sender's legitimacy and helps differentiate legitimate emails from phishing attempts or fraudulent messages.
VMCs complement existing email authentication mechanisms such as SPF, DKIM, and DMARC by enhancing brand visibility and recognition in the inbox. By displaying brand logos alongside authenticated emails, VMCs strengthen trust between senders and recipients, improve brand recognition, and contribute to a more secure and user-friendly email experience for all parties involved.