mechanism to verify webhok authenticity
Example:
- A webhook signature (HMAC or shared secret)?
- A specific header we should validate?
- IP ranges we can allowlist?
We want to make sure we can confirm that incoming webhook requests truly originate from Hostfully and prevent spoofed calls.
2
votes
felipe.arana
shared this idea