Something else Stripe and most other "serious" webhook senders do is only send Webhooks from a predefined set of IP addresses [1]. This isn't the security guar

Something else Stripe and most other "serious" webhook senders do is only send Webhooks from a predefined set of IP addresses [1]. This isn't the security guarantee that signing, etc. are but it's a substantial help in adding some Security In Depth. 1 - https://stripe.com/docs/ips https://stripe.com/docs/ips