API Testing · Middle · Question 42 of 75
Why verify a webhook signature?
- 1To make the webhook payload smaller and faster
- 2To make sure the request really comes from the provider
- 3To decrypt the payload, which is always encrypted
Show the answer
Correct answer: To make sure the request really comes from the provider
Explanation
Anyone can send a POST to your URL. An HMAC signature with a shared secret proves origin and integrity.