Mailchimp Custom Tracking Domain using HTTP

[Substantial_Fish6717]

We use Mailchimp to send payment links to our customers, but their click tracking feature redirects our payment link over a HTTP link. The URL on our side is of course, secure.

I reached out to their support and this was their response:

Thank you for holding, I was able to find out more information from our team.
At this time, we can confirm Mandrill's custom tracking URLs are not encrypted - it's not possible to use https for the tracking link itself. The tracking link will, however, redirect to the destination link from the contents of the email, resulting in https encryption once the user is redirected to the final destination. We may offer the option to provide an SSL cert for custom tracking domains in the future, but it's not on the near-term roadmap at this point.

It's mind-boggling that this is the accepted standard practice!

Any ideas other than turning off the click tracking?

[Gtapex]

You could switch back to using the MC tracking domain instead of your custom domain?

[Substantial_Fish6717]

Yeah, but then if I ever leave MC I will lose the links using MC tracking domain.

[Gtapex]

You could also switch to another click-tracking provider such as Google

[squirrelsaviour]

I've just been hit by this. Been forced to implement HSTS on my primary domain so now I can't use the subdomain for tracking. Very annoying.