Advanced Email adds click-tracker codes that are http instead of https, causing some users to see "unsecure link" notifications

This is more of a bug or design flaw with eTapestry than a new enhancement idea, but I'm told by customer supports that this is the only place to submit such information.

The problem: Using Advanced Mass Email, eTapestry inserts tracker codes into the HTML of the email in order to track when a recipient clicks on one of the links in the email. The problem is that the click-tracker which eTapestry wraps hyperlinks in doesn't use HTTPS protocol. (see screenshot)

A few years ago, this wouldn't have been a big deal, but in 2019, all modern browsers go on high alert when presented with HTTP URLs. So instead of the tracker codes being invisible to message recipients, some people get "unsecure link" notifications from their browsers when they click a link. This undermines user confidence in our website, and when it's time for them to make a donation, they're concerned about the security of our site and payment system (even though the site itself, and the BBMS payments pages, are all 100% HTTPS).

Blackbaud needs to update the architecture of the tracker service so it uses HTTPS protocol and doesn't alarm our supporters. 

  • Guest
  • Jul 2 2019
  • Completed
  • Attach files
  • Matt Maddux commented
    August 21, 2019 02:44

    Thanks for bringing this to our attention.  We agree those links should be 'https' nowadays so we went ahead and implemented the update yesterday.  Thanks so much for using eTapestry!