Hacker News new | ask | show | jobs
by m_mueller 3494 days ago
Yes, whitelisting makes much more sense. Github has an API that you can ask about which IPs are in their network - compare the webhook sender against that list and you're dandy. This should become a standard in webhook APIs.