What is the deliverability impact of non-HTTPS engagement tracking in email marketing?

Summary

Using non-HTTPS engagement tracking in email marketing negatively impacts deliverability through multiple pathways. Firstly, it erodes user trust, as browsers increasingly block or warn against mixed content, implying Google's concern over security. This leads to lower engagement rates, signaling to ISPs that the sender may be less reputable. Secondly, many email clients default to blocking images and tracking pixels served over HTTP, resulting in inaccurate tracking data. Thirdly, non-HTTPS tracking links are vulnerable to interception and manipulation, compromising data integrity. Security protocols such as HTTPS are crucial for authentication, data encryption, and preventing man-in-the-middle attacks, which is why ISPs are starting to penalize senders using HTTP links. By using HTTPS, emails are more protected from spam and phishing attacks as well as security warnings and promote data integrity and privacy, improving the likelihood that emails reach the inbox.

Key findings

  • Reduced User Trust: Mixed content warnings and blocking of HTTP resources reduce user trust.
  • Lower Engagement Rates: Decreased user interaction signals lower sender reputation to ISPs.
  • Inaccurate Tracking Data: Blocking of HTTP tracking pixels results in skewed and unreliable metrics.
  • Security Vulnerabilities: Non-HTTPS links are susceptible to interception and manipulation.
  • ISPs Penalize HTTP: ISPs are increasingly penalizing senders using HTTP links.
  • Increased Spam Risk: Lack of HTTPS makes emails more vulnerable to being marked as spam and phishing attacks.

Key considerations

  • Implement HTTPS: Ensure all tracking links and resources are served over HTTPS.
  • Monitor Engagement: Closely monitor engagement rates to detect any deliverability issues.
  • Update Security Protocols: Keep email security protocols updated to prevent vulnerabilities.
  • Vendor Compliance: Ensure that your email marketing vendor supports and enforces HTTPS.
  • Educate Stakeholders: Explain the importance of HTTPS to clients and colleagues, emphasizing the potential impact on deliverability.

What email marketers say
10Marketer opinions

The lack of HTTPS for engagement tracking in email marketing negatively impacts deliverability due to several factors. Primarily, it erodes user trust as browsers increasingly block or warn against mixed content (HTTP elements on HTTPS pages). This reduced trust leads to lower engagement rates (fewer clicks, opens), signaling to ISPs that the sender may be less reputable, thereby harming deliverability. Additionally, some email clients default to blocking images and tracking pixels served over HTTP, leading to inaccurate tracking and further reducing engagement metrics. Ultimately, adopting HTTPS is crucial for maintaining a positive sender reputation, ensuring data integrity, and improving email deliverability.

Key opinions

  • Erosion of Trust: Non-HTTPS tracking undermines user trust as browsers flag mixed content, leading to reduced engagement.
  • Reduced Engagement: Lower engagement rates signal to ISPs that the sender is less reputable, impacting deliverability.
  • Tracking Inaccuracies: Email clients may block HTTP tracking pixels, resulting in skewed data and unreliable metrics.
  • Security Vulnerabilities: Non-HTTPS tracking links are susceptible to interception and manipulation, compromising data integrity.
  • Alignment with Best Practices: Failing to use HTTPS groups you with senders who don't adhere to modern security and privacy best practices.

Key considerations

  • Implement HTTPS Tracking: Ensure all tracking links and pixels are served over HTTPS to maintain user trust and data security.
  • Monitor Engagement Metrics: Closely monitor engagement rates (opens, clicks) to detect any deliverability issues related to non-HTTPS tracking.
  • Consider Vendor Limitations: If your vendor doesn't support HTTPS tracking, explore workarounds or consider switching to a more secure provider.
  • Educate Clients: Explain the importance of HTTPS to clients and the potential negative impact of non-HTTPS tracking on deliverability.
  • Stay Updated: Keep abreast of evolving browser and email client security policies to ensure your email practices remain compliant.
Marketer view

Email marketer from GMass highlights how secure emails are more likely to reach inboxes and that the implementation of HTTPS helps achieve this. Also states that using HTTPS is better in the long term to avoid security warnings and protect the privacy of the customer.

July 2021 - GMass
Marketer view

Email marketer from Litmus emphasises the importance of email security using HTTPS. By doing this it ensures a secure connection to prevent data breaches and improve the trust from consumers.

October 2021 - Litmus
Marketer view

Email marketer from Sendinblue answers that while HTTPS is essential for data security, its absence can lead to decreased user trust and engagement. When users see that a website or email uses HTTP, it raises suspicion, leading them to interact less. Decreased interaction can lead to deliverability issues.

December 2023 - Sendinblue
Marketer view

Email marketer from Neil Patel's Blog explains that while not directly stated as a ranking factor, using HTTPS helps build trust with users and ISPs. This trust indirectly improves deliverability by reducing bounce rates and increasing engagement.

February 2023 - Neil Patel's Blog
Marketer view

Email marketer from Mailjet explains that not using HTTPS can lead to mixed content warnings, affecting user trust and potentially causing browsers to block tracking pixels or images. This reduced engagement can signal to ISPs that the sender is less reputable, harming deliverability.

November 2024 - Mailjet
Marketer view

Email marketer from Email on Acid talks about the future of email and how email clients will favour secure emails which can only be done through the use of HTTPS. Also mentions how important it is for securing customer data and privacy. It mentions deliverability could be affected for those who do not adopt it

February 2024 - Email on Acid
Marketer view

Marketer from Email Geeks shares that they haven’t been able to separate the impact of a sender not using HTTPS from other poor practices. They advise that the sender is grouping themselves with senders who don’t follow best practices. Zack also mentions that Chrome is moving away from showing mixed content (non-HTTPS images on an HTTPS page), implying Google's concern.

May 2024 - Email Geeks
Marketer view

Email marketer from Stack Overflow states that using HTTPS for tracking links is essential for user trust and data integrity. Non-HTTPS tracking links can be easily intercepted and manipulated, leading to inaccurate data and potential security vulnerabilities, ultimately affecting deliverability.

May 2021 - Stack Overflow
Marketer view

Marketer from Email Geeks explains that Chrome fetches HTTPS versions of HTTP URLs, so if the HTTPS equivalent of an image doesn't work, Chrome won't fetch anything, and tracking will fail. Will says it's hard to know what effect this has on inbox placement and that grown up vendors should be offering https.

November 2023 - Email Geeks
Marketer view

Email marketer from Reddit answers that many email clients now default to blocking images served over HTTP. This means that if your tracking pixel is HTTP, it won't load for a significant portion of your audience, leading to skewed tracking data and potential deliverability issues if ISPs see low engagement.

March 2025 - Reddit

What the experts say
2Expert opinions

Experts emphasize the growing importance of HTTPS for all links, including tracking links, to maintain good email deliverability. ISPs are increasingly penalizing senders using HTTP links due to perceived security risks. Utilizing HTTPS protects emails from spam and phishing attacks by reducing vulnerability, leading to emails being less likely to be marked as spam.

Key opinions

  • ISPs Penalize HTTP Links: ISPs are beginning to penalize senders who utilize HTTP links in their emails because of security risks.
  • HTTPS Protects Against Spam: Employing HTTPS in email marketing helps protect against spam and phishing attacks.
  • Security Vulnerability: Failure to use HTTPS makes emails more vulnerable to being marked as spam.
  • Reputation: Secure Tracking is needed to maintain a good sender reputation.

Key considerations

  • Implement HTTPS Tracking: Ensure all tracking links utilize HTTPS.
  • Update Security Protocols: Make sure that email security protocols are kept updated.
  • Monitor Reputation: Monitor sender reputation to notice any security risks.
Expert view

Expert from Word to the Wise explains that using HTTPS for all links, including tracking links, is increasingly important for deliverability. ISPs are starting to penalize senders who use HTTP links, as it's seen as a security risk. She emphasizes the need for secure tracking to maintain a good sender reputation.

May 2021 - Word to the Wise
Expert view

Expert from Spamresource explains how using strong security protocols like HTTPS helps to protect emails from spam and phishing attacks. When HTTPS is not implemented, it makes the emails more vulnerable which makes the emails more likely to get marked as spam.

January 2025 - Spamresource

What the documentation says
5Technical articles

Technical documentation emphasizes that using non-HTTPS engagement tracking negatively impacts email deliverability due to security risks and reduced user trust. Mixed content (HTTP resources on HTTPS pages) weakens overall security and negatively affects user experience. Modern browsers actively block mixed content, potentially blocking HTTP tracking pixels, leading to inaccurate tracking data and damaging sender reputation. HTTPS is crucial for encrypting data in transit, preventing eavesdropping, and ensuring data integrity, thereby enhancing trust and deliverability. Security risks associated with HTTP, such as eavesdropping and data manipulation, can further compromise user trust and deliverability.

Key findings

  • Mixed Content Issues: Serving mixed content weakens security and degrades user experience, potentially triggering browser warnings or blocking content.
  • Blocked Tracking Pixels: Browsers may block HTTP tracking pixels served on HTTPS emails, leading to inaccurate data and a damaged sender reputation.
  • Data Encryption: HTTPS provides essential data encryption, preventing eavesdropping and data manipulation during transit.
  • Security Risks of HTTP: HTTP introduces security vulnerabilities such as eavesdropping and data tampering.
  • Compromised Integrity: HTTPS crucial for authentication, confidentiality and data integrity when communicating, preventing man-in-the-middle attacks.

Key considerations

  • Implement HTTPS: Ensure all resources, including tracking pixels and links, are served over HTTPS to avoid mixed content issues.
  • Prioritize Data Security: Adopt HTTPS to safeguard data integrity and prevent eavesdropping and data manipulation.
  • Maintain User Trust: Employ HTTPS to enhance user trust and avoid negative perceptions associated with insecure content.
  • Compliance: Adhere to security best practices to improve overall email deliverability and minimize the risk of being flagged as spam.
Technical article

Documentation from OWASP highlights the various security risks with using HTTP like eavesdropping, man-in-the-middle attacks and tampering of data. This means sensitive data is more likely to be intercepted which impacts trust and deliverability.

March 2021 - OWASP
Technical article

Documentation from Mozilla Developer Network explains that modern browsers actively block mixed content to protect users. If email tracking pixels are served over HTTP on an HTTPS email, browsers may block them, leading to inaccurate tracking data and potentially affecting sender reputation.

September 2022 - Mozilla Developer Network
Technical article

Documentation from Google Developers explains that serving mixed content (non-HTTPS resources on an HTTPS page) can weaken the overall security of a website and negatively impact user experience. While focused on website SEO, the principles of user trust and security translate to email deliverability as well.

May 2023 - Google Developers
Technical article

Documentation from RFC2818 highlights how HTTP over TLS (HTTPS) is crucial for authentication, confidentiality and data integrity when communicating. It helps prevent man-in-the-middle attacks which is crucial for a safe user experience.

January 2023 - rfc-editor.org
Technical article

Documentation from IETF details the security considerations for HTTP. It underscores the importance of using HTTPS to encrypt data in transit, preventing eavesdropping and data manipulation. This general principle supports the idea that secure practices across all web communication, including email, improve overall reputation.

December 2021 - IETF