[binarynate]

I agree that local development is annoying, but I haven't found the other two to be pain points:

- For security, services that invoke webhooks usually cryptographically sign their payloads to allow their authenticity to be verified.

- Maybe you mean something else by serverless, but in my experience, it has been relatively easy to deploy an AWS Lambda function (e.g. using Serverless Framework) that gets called by a webhook.

Webhooks aren't perfect, but they do seem significantly simpler than the alternatives that come to mind, like WebSockets or WebRTC. Long polling is simpler, but often that is already an option for services that provide webhooks. I'll be interested to see if others have ideas for better alternatives, though.

[abeaclark]

I have seen cryptography on some webhooks, but after doing about 30+ integrations at my old company, most were very basic / no auth.

Maybe it's a standards thing. Perhaps if there were a standard for webhook format / security and then a lib to easily create / ingest.