4 ms·
We did have an error on one of the email links, but it's worth noting that we (and perhaps also Carta, among others) use Klaviyo for these emails, and klclick i
by nrp 5y ago
We did have an error on one of the email links, but it's worth noting that we (and perhaps also Carta, among others) use Klaviyo for these emails, and klclick is one of their domains.
- ncmncm 5y agoEven if you don't personally understand that such link substitutions indicate a phishing attempt, and so check links in emails before clicking them, any competent emailing service would know. Even my browser knew. Not to put too fine a point on it: get a better service; don't allow them to substitute a link to a domain that people who allowed you to use their address do not expect to see.
- nrp 5y agoDefinitely a fair concern, and thanks for reporting the issue. We're now working on moving to only using links on domains we control.
- ncmncm 5y agoSo both Klaviyo (on behalf of Framework) and Mailchimp (on behalf of Carta) are aggressively oblivious about security. The latter is more immediately worrisome, because they are entrusted with information about Carta customers' stock transactions.