preventing webhook events from hosts which pretend to be paypal

darule0
Contributor
Contributor

What is best practice for ensuring that our webhook events are only coming from paypal.com?

Should we simply ensure that the domain of the incoming is paypal.com or is use an ip range? 

Or other means?

Login to Me Too
0 REPLIES 0

Haven't Found your Answer?

It happens. Hit the "Login to Ask the community" button to create a question for the PayPal community.