Setting up HTTPS on your tracking domain

Your tracking domain (for example, clickom.yourdomain.com) is the domain that links in your emails pass through before they reach your website. Setting it up with HTTPS means subscribers click secure links. Browsers and security tools are also less likely to flag them.

New Ometria accounts have HTTPS tracking set up as standard. If your account was set up earlier, or you've added a new sending domain, ask Support to switch your tracking domain to HTTPS.

When you need HTTPS

• Subscribers see a "connection not private", "site is insecure" or certificate mismatch warning when they click links in your emails.
• Your website uses HTTP Strict Transport Security (HSTS) and the policy includes subdomains.
• You want links in your emails to open screens in your app. See Linking to app screens (deep linking).

Before you start

• Make sure someone who can edit your DNS records is available. This is often a different person or team from your Ometria users.
• If your domain has a CAA record, it must allow Amazon to issue certificates (amazon.com, amazontrust.com, awstrust.com or amazonaws.com). Ask your DNS team to check.

Set up HTTPS

Contact Support and ask for HTTPS on your tracking domain. The setup has three parts. You make two DNS changes, and Ometria does the rest.

Part 1: Validate the certificate

Ometria creates a security certificate for your tracking domain. Support sends you a CNAME name and value to validate it.

1. Add the new CNAME record to your DNS, in the public DNS zone that holds your existing tracking domain records.
2. Turn off proxying for this record (for example, the orange cloud in Cloudflare).
3. Tell Support when the record is live.

Add the record within 48 hours of receiving it. Otherwise Support needs to start the process again.

Keep this record in place after setup. Ometria uses it to renew your certificate.

Part 2: Route traffic through the certificate

Once the certificate is validated, Support sends you a new value for your existing tracking domain CNAME.

1. Find the existing CNAME record for your tracking domain. It currently points to click.spe.ometria.email.
2. Change its value to the new value Support sent you. The new value ends in .cloudfront.net.
3. Tell Support when the change is live.

Edit the existing record. Don't add a second record with the same name.

Part 3: Ometria switches your links to HTTPS

Ometria updates its email sending service so your emails use HTTPS tracking links. You don't need to do anything for this part. Support confirms when it's done, and emails you send from then on use HTTPS tracking links.

When setup is complete, you have two CNAME records for each tracking domain: the validation record from part 1 and the record you edited in part 2.

Tips for adding the records

• Some DNS providers, such as Azure, add your domain to the record name automatically. Enter only the part before your domain, so the domain doesn't appear twice.
• If your tracking domain has its own DNS zone, add the records in that zone.