Why does BIMI require DMARC at p=quarantine or reject?

BIMI only rewards domains actively protecting their identity. If DMARC is at p=none anyone could spoof the domain and display the logo.

Enforcement ensures the brand has taken full responsibility for its authentication.

Was this answer helpful?

Thanks for your feedback!