6 ms·

API keys are symmetrical, so every client needs a unique one. Singing allows the server to have only one certificate for all clients (webhook receivers). More c

• immibis 1y ago
  But the server has no problem storing a unique webhook address for each client. I suppose you can just add a bearer token into the address, if you need that. A different address per association, containing a bearer token, with HTTPS, provides the same security as if the bearer token was sent in a separate header.
• voganmother42 1y ago
  if the server can carry a tune that is
• mfbx9da4 1y ago
  Webhooks basically never implement asymmetric signing. If you survey the industry 99% of the time if it’s signed, it’s hmac.