Loading today's brief
Single community source: Show HN.
A while back, I needed to make a webhook system for a project I was working on. I pretty quickly found out that webhook auth is not an entirely solved problem with people frequently implementing DIY solutions. I also found out that while using some form of asymmetric signature (eg. oauth tokens) is common with regular api auth, most webhook producers use symmetric signatures (HMAC) instead. This bugged the hell out of me because the webhook functionality I needed was pretty basic, but using symmetric signatures, which requires the webhook producer to hold onto a secret for every endpoint they…
Not summarised — no summariser is configured, so the text above is the source's own excerpt.
Discussion: the thread about this
| Age | -1.9 |
| Community engagement | 3.5 |
| Content type | 6 |
| Community signal | 4 |
| Unverified claim | -6 |
| Total | 5.6 |