Why does the Outlook app display the URL behind href links in the email content?
Summary
What email marketers say10Marketer opinions
Email marketer from Reddit suggests that it could be due to Outlook's reading pane settings, where hovering over a link displays the full URL for security reasons, regardless of the HTML coding.
Email marketer from BleepingComputer Forums states it's likely a security feature that displays the full URL as a warning sign for links that might redirect to malicious sites.
Email marketer from EmailGeeksForum mentions that some email clients are implementing stricter security measures, which include displaying the full URL to prevent phishing attempts by masking the true destination of the link.
Marketer from Email Geeks suggests it could be an HTML coding bug causing the URL to display in the Outlook app.
Marketer from Email Geeks suggests it could be a bug of ESP adding its link tracking into the email code causing the URL to display in the Outlook app.
Email marketer from TechTarget says the changes are part of an industry-wide shift towards more transparent security practices in email clients, giving users more information before clicking.
Email marketer from PhishingAwareness.com states that some email clients now show the full URL to educate users about where they are being directed, thereby enhancing security and trust.
Email marketer from CybersecurityBlog explains the feature to display URLs helps users make informed decisions by showing the complete path and destination of the link.
Email marketer from StackExchange notes that this behavior is often seen when security software or email clients are configured to reveal the underlying URL to help users identify potential phishing attempts.
Email marketer from MarketingLand suggests that ESP link tracking could be the culprit, as Outlook might be displaying the raw, tracked URL before it redirects to the intended destination.
What the experts say2Expert opinions
Expert from Email Geeks asks why it is being assumed it's a bug and suggests it could be a deliberate choice by Outlook, especially considering German alignment beliefs.
Expert from Word to the Wise, Dennis Dayman, suggests it's a security measure implemented by Outlook to increase transparency and help users identify potential phishing attempts by showing the full URL before they click.
What the documentation says5Technical articles
Documentation from OWASP mentions that URL obfuscation is a common phishing technique and recommends security awareness training that includes recognizing and validating full URLs before clicking on links.
Documentation from Google Transparency Report indicates that displaying full URLs is a common tactic used to combat phishing and malware distribution by making it easier for users to identify suspicious links.
Documentation from Microsoft Docs explains the 'Safe Links' feature rewrites URLs for scanning, and the original URL is displayed on hover or in certain views as part of its security mechanism.
Documentation from Microsoft Support states the behavior is related to 'Safe Links' feature, where Outlook rewrites URLs to scan them for malicious content. The displayed URL is the Microsoft scanning service's address.
Documentation from URLScan explains that URL scanning services, like those used by Outlook, analyze URLs for malicious content and may display the scanned URL instead of the original in some cases.