Why do ESPs use CNAMEs for click and open tracking?
Still have a question, spotted an error, or have a better explanation or a source we should cite?
Every time someone clicks a link in your email, that click passes through a tracking server before reaching its final destination. That tracking server belongs to your ESP. And by default, the URL the recipient sees reflects your ESP's domain, not yours. Something like click.esp-platform.com instead of click.yourbrand.com.
A CNAME record is a DNS entry that points one domain name to another. When you set up a CNAME like click.yourdomain.com pointing to your ESP's tracking servers, every tracked link in your emails looks like it lives on your domain. Your ESP still handles all the server-side infrastructure, but from the outside world's perspective, it's your domain doing the work.
There are four solid reasons ESPs do it this way.
Your domain builds its own reputation. Spam filters and security tools look at the domains inside your links, not just who sent the email. If your tracked links point to a generic ESP domain, your clicks are pooled with thousands of other senders using that same domain. One bad actor on the platform can drag everyone's link reputation down. With your own CNAME, your domain's link history is yours alone.
Recipients and security tools trust branded links more. A link that reads click.yourdomain.com looks legitimate to email clients, browser security warnings, and the humans reading your emails. Generic tracking domains get flagged more often, especially by corporate firewalls and email security gateways that pre-scan links. Branded tracking clears those filters more cleanly.
Your ESP can update infrastructure without touching your DNS. If your ESP migrates tracking servers, upgrades systems, or changes IP addresses, the CNAME points to wherever they direct it. You set it once and walk away. No re-configuration on your end when they make changes behind the scenes.
SSL certificates get handled for you. HTTPS is required for tracked links (plain HTTP links trigger browser warnings and can fail in some email clients). Your ESP provisions and renews the SSL certificate for your subdomain as part of the CNAME setup. You get a secure branded URL without managing certificates yourself.
The short version: CNAMEs let you put your name on the tracking infrastructure your ESP already runs. It's better for deliverability, better for trust, and honestly, it just looks more professional. If your ESP offers this option and you're not using it, it's worth setting up sooner rather than later.
Want to go deeper? See how branded tracking domains work end to end, or check out how CNAMEs relate to link tracking if you want the DNS mechanics first.
Contributors
Who worked on this answer
Every name links to their profile. Every company links to their site. Real people, real accountability.
