A while back we quietly pushed an update live that meant the entire Campaign Monitor experience was now served securely over SSL. Originally only our signup, login and all payment pages were served this way. In the interest of keeping your data as secure as possible at all times, we recently made the call to switch the entire application over.
This means that there is always a secure, encrypted link between you (or your clients) and Campaign Monitor. It also ensures account data such as your subscriber lists and campaign reports remain private at all times.
It’s also worth noting that we’ve gone with a white label approach with our SSL certificate that doesn’t relate directly back to Campaign Monitor. As always, we want to provide the best experience possible for everyone while staying true to our private label offering.
There is one important exception to our SSL support right now, it’s not available for accounts with custom domains. A custom domain allows you to host your Campaign Monitor account at any domain of your choosing. Because we need to own the domain we set up the SSL certificate for, we can’t just roll this out for everyone automatically. In reality, this just means business as usual for custom domain accounts. Like always, your login and payment pages will still be served via SSL.
This certainly isn’t a huge update, but it’s one of the many small tweaks we’re continually making to the application and our infrastructure to make sure we can offer you guys a secure Campaign Monitor experience. Plus, it helps our sysadmins sleep better at night. Even if they already know how much we all appreciate them.