Meta tags:
description=By default, tracked links that use your custom subdomain as specified with the CNAME record are basic HTTP links. You can enable HTTPS link tracking by configuring your link tracking and we’ll automatically generate a valid SSL certificate and proxy links to our link tracking domain for you.;

Headings (most frequently used words):

tracking, link, https, up, with, set, cloudflare, your, how, it, certificate, setting, email, can, we, make, better, works, legacy, what, happens, if, change, my, domain, failure, to, generate, allow, google, as, authority, amazon, cloudfront, fastly, cdn, nginx, latest, features, at, customer, io, waf, settings, bulk, redirects, see, which, clients, recipients, use, manage, all, accounts, single, login, honor, audience, consent, for, open,

Text of the page (most frequently used words):
your (160), the (120), and (117), link (92), you (90), tracking (83), messages (78), app (78), push (77), domain (76), for (68), set (64), #customer (56), track (54), links (49), with (48), email (46), events (45), https (43), started (43), people (41), use (39), notifications (38), data (37), certificate (32), get (32), that (31), com (29), metrics (29), identify (29), how (27), settings (27), troubleshooting (27), can (26), api (25), example (25), record (23), message (23), cloudflare (20), send (20), create (20), add (20), google (18), tracked (18), start (18), host (18), our (17), will (17), from (17), account (17), mobile (17), changelog (17), event (17), what (16), click (16), cname (16), ssl (16), multiple (16), anonymous (16), getting (16), campaigns (16), this (15), configuration (15), security (15), new (15), custom (15), page (14), proxy (14), update (14), manage (14), have (13), name (13), server (13), dns (13), guide (13), listeners (13), deep (13), test (13), campaign (13), need (12), like (12), workspace (12), options (12), activity (12), quick (12), inbox (12), integrations (12), objects (12), setting (11), works (11), already (11), verify (11), content (11), edit (11), channels (11), users (11), authentication (11), capture (11), subscription (11), service (10), support (10), generate (10), enabled (10), advanced (10), messaging (10), inline (10), android (10), screen (10), lifecycle (10), segments (10), privacy (9), cloudfront (9), now (9), default (9), tls (9), using (9), handling (9), providers (9), migrate (9), editor (9), transactional (9), make (8), nginx (8), fastly (8), cdn (8), amazon (8), legacy (8), through (8), records (8), certificates (8), billing (8), notification (8), webhooks (8), liquid (8), emails (8), features (7), when (7), section (7), under (7), should (7), may (7), requests (7), want (7), provider (7), flutter (7), packages (7), version (7), design (7), studio (7), integration (7), introduction (7), forms (7), components (7), overview (6), copy (6), field (6), validate (6), must (6), are (6), value (6), location (6), pki (6), region (6), actions (6), distribution (6), subdomain (6), rules (6), which (6), time (6), caa (6), issue (6), upgrade (6), sms (6), ios (6), react (6), native (6), analysis (6), inbound (6), conditions (6), status (5), about (5), pipelines (5), waf (5), change (5), below (5), past (5), existing (5), haven (5), enter (5), check (5), errors (5), etc (5), key (5), url (5), own (5), depending (5), origin (5), sure (5), delete (5), information (5), mode (5), full (5), common (5), addresses (5), best (5), practices (5), whatsapp (5), updates (5), earlier (5), reference (5), segment (5), frequently (5), asked (5), questions (5), hubspot (5), code (5), out (5), javascript (5), syntax (5), welcome (5), css (5), sending (5), triggered (5), broadcasts (5), workflows (5), policy (4), documentation (4), journeys (4), platform (4), valid (4), help (4), authority (4), once (4), something (4), changing (4), cause (4), break (4), anything (4), response (4), header (4), invalid (4), pointing (4), health (4), private (4), file (4), request (4), then (4), has (4), fields (4), cache (4), aws (4), more (4), agent (4), web (4), opens (4), clicks (4), plan (4), live (4), tab (4), select (4), see (4), verification (4), setup (4), 2026 (4), understand (4), accounts (4), builder (4), groups (4), rich (4), apis (4), conversions (4), snowflake (4), reporting (4), storage (4), bigquery (4), redshift (4), webhook (4), based (4), client (4), understanding (4), tests (4), recipes (4), statuses (4), preferences (4), global (4), component (4), faq (4), styles (4), opt (4), layouts (4), branches (4), timestamp (4), attributes (4), filters (4), style (4), relationships (4), docs (4), software (3), team (3), feedback (3), address (3), bulk (3), redirects (3), allow (3), happens (3), collapsed (3), closed (3), tell (3), looking (3), pictured (3), mldr (3), white (3), labeled (3), those (3), pass (3), token (3), properly (3), just (3), means (3), proxy_pass (3), following (3), match (3), into (3), other (3), override (3), take (3), two (3), disable (3), dashboard (3), choose (3), follows (3), all (3), headers (3), http (3), adding (3), import (3), manager (3), don (3), servers (3), case (3), automatically (3), proxying (3), one (3), services (3), yourdomain (3), enable (3), but (3), configure (3), automatic (3), audience (3), releases (3), login (3), conversion (3), workspaces (3), single (3), sign (3), assign (3), roles (3), standard (3), performance (3), logs (3), expo (3), implementation (3), visual (3), website (3), twilio (3), slack (3), salesforce (3), mixpanel (3), facebook (3), ads (3), cohorts (3), triggers (3), map (3), reverse (3), etl (3), beta (3), compliance (3), deliverability (3), broadcast (3), goals (3), personalize (3), center (3), multi (3), attribute (3), templates (3), surveys (3), json (3), trigger (3), phone (3), integrate (3), preview (3), drag (3), drop (3), consent (3), smtp (3), types (3), workflow (3), why (3), export (3), via (3), csv (3), mcp (3), clients (3), contact (2), resources (2), pricing (2), parcel (2), possible (2), not (2), optional (2), part (2), close (2), failure (2), modifies (2), misrepresents (2), referring (2), result (2), even (2), passed (2), additional (2), sanity (2), visit (2), followed (2), body (2), else (2), there (2), problem (2), certs (2), crt (2), listen (2), regional (2), won (2), able (2), specified (2), conf (2), place (2), named (2), instructions (2), right (2), proxied (2), activate (2), purposes (2), return (2), process (2), management (2), head (2), button (2), checking (2), changeme (2), net (2), configuring (2), wait (2), appropriate (2), alternate (2), names (2), methods (2), behavior (2), protocol (2), navigate (2), requesting (2), they (2), cover (2), than (2), east (2), log (2), include (2), option (2), exception (2), firewall (2), problems (2), repeat (2), paid (2), ttl (2), control (2), image (2), step (2), either (2), because (2), strict (2), added (2), before (2), october (2), 2025 (2), goog (2), restrict (2), authorities (2), configured (2), also (2), minutes (2), manual (2), recommended (2), txt (2), any (2), basic (2), index (2), browser (2), issues (2), store (2), cookies (2), expiration (2), search (2), access (2), members (2), tasks (2), audit (2), provisional (2), sound (2), sdks (2), html (2), comparing (2), pixel (2), sendgrid (2), rudderstack (2), azure (2), blob (2), cloud (2), audiences (2), braze (2), amplitude (2), connections (2), classic (2), deleting (2), postgresql (2), mysql (2), microsoft (2), sql (2), filter (2), incoming (2), csp (2), another (2), disconnect (2), backend (2), form (2), lead (2), video (2), semantic (2), directory (2), results (2), personalization (2), library (2), files (2), find (2), brand (2), parameters (2), localization (2), line (2), activities (2), respond (2), feature (2), adoption (2), upcoming (2), promotions (2), nps (2), display (2), number (2), flow (2), build (2), sender (2), senders (2), adapting (2), template (2), open (2), relay (2), zone (2), reusable (2), exit (2), person (2), batch (2), concepts (2), newsletters (2), reminders (2), trial (2), book (2), customers (2), frequencies (2), aren (2), collaborate (2), automation (2), connected (2), review (2), accessibility (2), shortcuts (2), devices (2), work (2), segmentation (2), collections (2), non (2), their (2), survey (2), suggestions (2), cli (2), academy (2), structured (2), learning (2), honor (2), demo (2), 2024, peaberry, inc, terms, 9450, gemini, suite, 43920, beaverton, oregon, 97008, 7105, win, startup, program, partners, careers, company, guides, competitors, community, blog, release, notes, soon, appreciate, bot, please, provide, improve, yes, better, helpful, download, copied, clipboard, traffic, specifying, instead, proxy_set_header, ssl_certificate_key, ssl_certificate, server_name, 443, wrong, later, steps, ensuring, chain, alternatively, serve, however, accomplish, leave, blank, upper, minute, finish, activating, branded, overrides, think, poses, risk, error, give, assumes, done, first, domains, delivery, network, finally, back, propagated, propagation, checker, whatsmydns, point, shown, acm, replace, preferred, query, strings, put, post, patch, allowed, tlsv1, minimum, only, ensure, approved, issued, owners, them, approve, ownership, cannot, 2048, bit, rsa, per, limitations, virginia, satisfy, redirect, away, subdomains, matches, operator, user_agent, managed, strength, block, rule, ruleset, user, application, seconds, less, effectively, zero, caching, show, looks, save, present, skip, next, otherwise, directed, site, websites, flexible, requires, same, root, would, modes, customeriomail, handles, generation, making, easy, contains, pay, specify, business, enterprise, upload, required, hostnames, some, had, tool, issuewild, these, replacing, actual, authorization, let, handle, again, hours, typically, note, provisioning, verified, disabled, going, hostname, yourself, where, points, prove, secure, browsers, understands, safe, generated, unique, proxies, ultimate, destination, updated, july, 171, 8_https, complete, llms, har, qualifications, respecting, gdpr, allowlist, session, sensitivity, timezone, experimental, regions, sso, factor, credentials, customize, canceling, payment, reducing, overages, credits, bill, sdk, channel, swift, zendesk, yandex, wisepops, optimizer, vwo, twitter, engage, tiktok, talon, sprig, marketing, saleswings, sent, ripe, qualtrics, playerzero, pipedrive, pinterest, moengage, metronome, meta, logrocket, livelike, launchdarkly, koala, intercom, heap, tag, gtm, sheets, analytics, gtag, gainsight, fullstory, friendbuy, criteo, cordial, commandbar, clevertap, bing, attio, algolia, insights, adobe, target, actable, predictive, resend, filtering, mapping, database, warehouse, action, zoho, zapier, mparticle, platforms, python, node, call, calculator, scheduled, syncs, transform, utility, identity, managing, identities, method, frameworks, wordpress, wpforms, webflow, unbounce, typeform, squarespace, jotform, formstack, sources, backfill, historical, playback, chat, ecommerce, alias, group, source, specs, failed, attempted, conclusive, reports, home, composer, reusing, snippets, list, deliveries, drafts, requirements, assets, outside, language, preference, faqs, pages, unsubscribes, universal, translations, translate, languages, milestones, achievements, promote, offers, localize, compose, hipaa, regulations, kind, registration, compliant, register, numbers, keyword, smart, character, encoding, keywords, shortening, mms, payloads, registering, device, tokens, trustpilot, reviews, gmail, does, fake, bcc, preheader, text, avatar, logo, mailchimp, column, foundation, view, amp, pre, processing, archive, customizing, basics, editors, oracle, dyn, sparkpost, postmark, mandrill, mailjet, mailgun, deliverable, kickbox, anonymized, authenticating, apple, unsubscribe, rfc, 8058, postmaster, tools, suppression, lists, suppressions, spamhaus, blocklist, listings, shared, dedicated, warming, attachments, creating, transitioning, limits, supported, formats, zones, geolocation, queue, draft, direct, mail, lob, receive, randomized, delay, until, window, delays, blocks, true, false, random, split, reformat, fix, inconsistent, journey, items, holdout, llm, decisions, examples, format, inactive, trips, rss, feed, cohort, optimize, words, onboarding, double, cart, abandonment, birthday, anniversary, recipe, grace, periods, tickets, syncing, sync, stripe, follow, responses, receiving, entering, troubleshoot, state, schedule, criteria, tags, history, submit, teammates, stylesheet, loop, conditionals, directives, modifiable, placeholder, scratch, publish, changes, connect, quality, mso, emmet, fixes, variables, cleanup, formatting, inlining, mjml, framework, transformers, individual, responsive, dark, keyboard, convert, specific, within, days, building, driven, waitlist, awareness, announce, drive, usage, upsell, monetize, power, cases, object, tutorials, external, merging, know, available, storing, suppress, profile, ids, last, visited, resolve, duplicate, profiles, cursor, ides, claude, chatgpt, command, routines, skills, ask, way, helps, stay, longer, separate, each, guest, breaks, down, tells, recipients, latest,

Text of the page (random words):
cs android channels in app messages set up in app messages inline in app messages in app event listeners what s new 4 x 4 3 3 4x 4 x 3 x 3 4 2 x 3 x changelog react native quick start guide getting started how it works authentication packages and configuration options troubleshooting identify and track users identify people track events screen tracking mobile lifecycle events anonymous activity push notifications set up push notifications deep links handling multiple push providers capture push metrics android channels in app messages set up in app messages inline in app messages in app event listeners what s new 4 x 5 0 0 4 x 4 3 3 4x 4 x 3 x 3 4 2 x 3 x changelog react native get started identify people track events push notifications set up push notifications deep links handling multiple push providers capture push metrics in app messages set up in app messages in app event listeners updates and troubleshooting migrate from an earlier version troubleshooting changelog react native get started identify people track events push notifications set up push notifications deep links handling multiple push providers capture push metrics in app messages set up in app messages in app event listeners updates and troubleshooting migrate from an earlier version update to version 3 4 troubleshooting changelog expo quick start guide getting started how it works authentication packages and configuration options troubleshooting identify and track people identify people track events screen tracking mobile lifecycle events anonymous activity location tracking push notifications set up push notifications app groups for push tracking deep links capture push metrics android channels multiple push providers in app messages inline in app messages notification inbox set up in app messages in app event listeners what s new 3 x 3 3 2 x 3 x 1x 2 x changelog expo get started identify people track events push notifications set up push notifications deep links capture push metrics in app messages set up in app messages in app event listeners updates and troubleshooting troubleshooting changelog flutter quick start guide get started how it works authentication configuration options troubleshooting identify track users identify people mobile lifecycle events anonymous activity screen tracking track events location tracking push notifications set up push notifications app groups for push tracking deep links handling multiple push providers capture push metrics android channels in app messages in app messages inline in app messages notification inbox in app event listeners what s new 3 x 4 0 0 3 x 3 5 0 2 x 3 0 0 2 x 2 2 upgrade to flutter 2 x changelog flutter quick start guide get started how it works authentication configuration options troubleshooting identify track users identify people mobile lifecycle events anonymous activity screen tracking track events push notifications set up push notifications deep links handling multiple push providers capture push metrics android channels in app messages in app messages inline in app messages in app event listeners what s new 2 x 2 2 upgrade to flutter 2 x changelog flutter get started identify people track events update flutter sdk push notifications set up push notifications deep links handling multiple push providers capture push metrics in app messages in app messages in app event listeners updates and troubleshooting update ios troubleshooting changelog settings billing account verification audit logs tasks workspace performance billing how we bill billing for sms messages billing for whatsapp messages ai credits reducing billing overages payment problems canceling your account plan features builder plan your account manage team members how to add team members assign standard roles create assign custom roles access multiple accounts edit account information customize your ui manage your api credentials security best practices two factor authentication single sign on sso account regions us and eu enable experimental features workspaces workspaces in customer io understand timezone conversion case sensitivity and your data search your workspace privacy security session cookies and expiration allowlist our ip addresses customer io gdpr and you security mobile and app store privacy privacy respecting your users privacy ai settings customer io security qualifications troubleshooting troubleshooting login and browser issues create a har file for help troubleshooting releases this page is part of the customer io documentation for the complete documentation index see llms txt messaging channels links 8_https link verification md 171 https link tracking updated july 10 2026 by default tracked links that use your custom subdomain as specified with the cname record are basic http links you can enable https link tracking by configuring your link tracking and we ll automatically generate a valid ssl certificate and proxy links to our link tracking domain for you how it works we generated a unique url for any link you track this link proxies through our link tracking domain and then to the ultimate destination that s how we track clicks but for https link tracking we need to use a valid ssl certificate to prove that the proxy is secure so that your audience browsers and any security software understands that the link is safe in this case we ll generate a record you can add to your dns provider that points to our link tracking domain and we ll generate a valid ssl certificate for you upgrade to automatic https link tracking if you set up your domain before october 8 2025 you may have configured your own ssl certificate and proxy through a service like cloudflare or nginx you can now upgrade to automatic https link tracking where we generate and manage your tls certificate for you go to settings workspace settings email select your domain and click upgrade to https then choose how you want to configure your dns records automatic setup recommended we ll configure your cname and txt records automatically with your dns provider manual setup add the dns records to your domain yourself set up https link tracking go to settings workspace settings email and select your domain select your domain and click the link tracking tab update the hostname if you want to change the subdomain for tracked links copy the cname record to your dns provider if you use a provider like cloudflare make sure that the proxy status is disabled we re going to generate the certificate and proxy the links for you return to customer io and click verify domain like domain verification this process can take up to 72 hours depending on your dns provider but typically happens in minutes if you see a note that we re provisioning your certificate when you verify your domain that means that the domain is verified but it ll take up to 10 minutes for us to generate the certificate and proxy your links what happens if i change my link tracking domain changing your link tracking domain will cause your existing tracked links to break if you already configured a link tracking domain you should also use that domain like link example com when you enable https link tracking failure to generate a certificate if your domain provider has a proxy setting enabled for the link tracking domain s cname record we won t be able to generate and handle the certificate for your links disable this setting and click verify domain again if you have caa records that restrict the certificate authorities that can issue certificates for your domain you ll need to update your caa record to let google issue certificates for your domain allow google as a certificate authority we issue ssl certificates through google s certificate authority if your domain has caa certificate authority authorization records that restrict which certificate authorities can issue certificates for your domain you must allow google to issue certificates if you have existing caa records that don t include google you ll need to add these records to your dns configuration replacing yourdomain com with your actual domain yourdomain com in caa 0 issue pki goog yourdomain com in caa 0 issuewild pki goog legacy https link tracking if you added your domain before october 7 2025 you had to set up your own ssl certificate and proxy through a service like cloudflare or tool like nginx we have instructions for some common services below set up https link tracking with cloudflare cloudflare automatically handles tls certificate generation and proxying for you making it easy to set up https link tracking if your link tracking domain contains more than one subdomain e g a b example com you ll need to pay for cloudflare s advanced certificate manager on which you can specify the subdomain you need to cover or if you have a cloudflare business or enterprise plan you can upload a custom ssl certificate with the required hostnames when you set up link tracking with cloudflare you can set your ssl tls settings to either full or full strict full mode is more flexible because you can use either e customeriomail com or track customer io in your cname with full strict mode you must use track customer io because it requires that the certificate common name and alternate name have the same root domain which would be customer io in this case see cloudflare s documentation for more information about ssl modes in cloudflare go to websites if your domain is already present skip to the next step otherwise click add site and set up your name servers and dns records as directed by cloudflare go to the dns page and click add record in customer io go to settings workspace settings email and select your domain go to the link tracking tab and copy the cname record information to your new record in cloudflare make sure that the proxy status is enabled it ll show proxied if your record looks like the image below click save go to the ssl tls tab and make sure that you re using the full mode optional if you want to record repeat opens clicks and you have a paid cloudflare account you can go to the caching page and set your time to live ttl value to 10 seconds or less effectively zero which can help you record repeat opens clicks if you re not on a paid plan you can t control your cache s ttl settings in your customer io workspace settings under email set up your link tracking domain if you haven t already enter your domain in the host name field and click verify domain to re validate the domain you should now pass the https check and tracking links will use https by default if past messages already have white labeled tracked links changing your link tracking domain will cause those existing tracked links to break when the domain is collapsed closed you can tell that https link tracking is enabled by looking at the link tracking section pictured below once enabled your tracked links will now start with something like https link example com mldr cloudflare waf settings cloudflare has web application firewall waf settings depending on the strength of your firewall it may block our request to verify your domain if you have problems you may need to add a rule to your waf ruleset to make an exception for our user agent go to security waf managed rules click add exception and add the following information field http user_agent operator matches value customer io cloudflare bulk redirects make sure you don t redirect requests away from the subdomain that you set up https link tracking for on in your cloudflare configuration settings you may need to disable the include subdomains option for bulk redirects setting up https link tracking with amazon cloudfront log into aws and navigate to the aws certificate manager import or request a new ssl certificate for the domain you want us to use for your tracked links e g link example com to satisfy cloudfront mldr your ssl certificate must be in the us east n virginia region us east 1 cannot be more than 2048 bit rsa per cloudfront s limitations must cover the subdomain you are using with us for your tracked links e g link example com if requesting a new certificate through aws they will send an email to the appropriate domain owners requesting them to approve the certificate or you can verify ownership by adding a dns record ensure that the certificate is approved and issued navigate to aws cloudfront create a new distribution under the origin section set the fields as follows origin domain track customer io or track eu customer io depending on your region protocol https only minimum origin ssl protocol tlsv1 2 name track customer io or track eu customer io depending on your region under the default cache behavior section set the fields as follows allowed http methods get head options put post patch delete cache key and origin requests legacy cache settings headers all query strings all under the settings section set the fields as follows alternate domain names cname link example com replace with your preferred link tracking domain custom ssl certificate choose the appropriate acm certificate click a create distribution button wait for the distribution status to be enabled add or update a cname record in your link tracking domain s dns settings for the domain you are configuring e g link example com and point it to the domain name shown in cloudfront for your distribution e g changeme cloudfront net the host name and value for your cname record will be something like cname record host name link example com cname record value changeme cloudfront net verify that your dns record has propagated and is now pointing to your cloudfront distribution you can do this by checking the cname value at a propagation checker like whatsmydns as an additional sanity check you can visit your link tracking domain followed by health e g https link example com health if your domain is properly pointing to our api the response body will just be anything else means there is a problem with your configuration if anything in your proxy s configuration modifies or misrepresents the referring host your links may result in invalid link security token errors even if you get a response your proxy server must use your link tracking domain as the host header for the requests that are passed to our server finally once you are sure that your distribution is properly pointing to our api head back to customer io and go to your workspace settings for email if you haven t already set up your link tracking domain e g link example com enter it now in the host name field and click the verify domain button to re validate the domain you should now pass the https check and tracking links will use https by default if past messages already have white labeled tracked links changing your link tracking domain will cause those existing tracked links to break when the domain is collapsed closed you can tell that https link tracking is enabled by looking at the link tracking section pictured below once enabled your tracked links will now start with something l...