I'm implementing webhook notifications. I've already implemented signature validation based on the official documentation. My security/network team requires IP whitelisting to allow traffic in our test environments. The only reference to IP addresses I found in PayPal documentation is this page https://www.paypal.com/in/smarthelp/article/what-are-the-ip-addresses-for-live-paypal-servers-ts1056 and it doesn't mention webhooks notifications. From my tests I saw a few webhooks notifications coming from 173.0.80.117 in sandbox environment. Is it enough to whitelist 173.0.80.0/20 ? Or should I expect to see webhook notifications coming from other IP ranges? Thank you. V
... View more
