Amen. FWIW, we are open source, and we publish libraries that let anyone sign and verify webhooks, hoping to save people the work and have a unified standard.

Amen. FWIW, we are open source, and we publish libraries that let anyone sign and verify webhooks, hoping to save people the work and have a unified standard. Libs: https://github.com/svix/svix-webhooks https://github.com/svix/svix-webhooks Docs: https://docs.svix.com/receiving/verifying-payloads/how-manual https://docs.svix.com/receiving/verifying-payloads/how-manua... The docs mention `Svix-Signature`, but we (and the libs) also support `Webhooks-Signature` which are useful for the generic standard. The fact that we don't have REST for webhooks is both silly and annoying. Especially since (as you can see on the list in the original post) many companies who implement webhooks end up doing it poorly.