News for hackers. Stuff that matters.
Re:Building Webhooks into Your Application: Guidelines and B... by michaelbuckbee on Tuesday March 09, 2021 @04:51PM (#26404826)
Something else Stripe and most other "serious" webhook senders do is only send Webhooks from a predefined set of IP addresses [1].

This isn't the security guarantee that signing, etc. are but it's a substantial help in adding some Security In Depth.

1 - https://stripe.com/docs/ips

There are no comments on this comment yet.