What We Fixed
Newsletter campaigns sent through SendGrid and Mailgun could show zero opens, clicks, and deliveries even when recipients were clearly engaging. Tracking is driven entirely by webhooks the provider sends back to Sure Send, and a few issues were causing those events to be silently dropped before they could be recorded.
Tracking works immediately, even before signing is set up. Previously, if a provider’s webhook signing key wasn’t configured, every incoming event was rejected and discarded. Now, when no signing key is configured for an account, tracking events are accepted (and logged) so opens, clicks, and deliveries flow through right away. Where a signing key is configured, signatures are still strictly verified — a bad signature is still rejected as a forgery.
SendGrid’s “Fix Webhook” now actually repairs a live account. The setup routine used to only ever try to create a brand-new webhook, which SendGrid rejects with a “webhook already exists” error on any account that already had one — so signing could never be enabled. It now finds the existing webhook, updates it in place, enables signing, and stores the verification key.
Mailgun’s “Verify” button is now honest. It used to report “healthy” even when the HTTP signing key was missing and 100% of events were being rejected. It now flags a missing signing key, and we fetch the key automatically from Mailgun where possible. You can also enter it manually in the provider settings.
New API email providers configure their webhooks automatically. Adding a Mailgun or SendGrid provider now sets up and validates its webhooks in the background, so tracking works without a manual “Fix Webhook” step.
Existing accounts with broken tracking are repaired by an internal backfill — no action required.