Webhooks Security

Question

Hi all, I have been read the webhook documentation (https://www.adobe.io/apis/documentcloud/sign/docs.html#!adobedocs/adobe-sign/master/webhooks.md#securing-webhooks) and I know there is the Two-way SSL authentication, but is there another security that client server could do? Some extra security?
Like whitelist the adobe webhook IP's range.
I read that "your webhook URL must not be blocked by a firewall", but if I only open/available the URL for some IP's (adobe IP's) it will avoid the webhook?
Also I see that "the client URL must be available on the public internet", but the must avaliable for everybody, every IP?
Is there some reason to use only 2-way SSL?

SimonESATS · Answer

2-way is optional you don't have to use it. It'll be the Adobe Sign server which will pring Post messages to the url, so only the Adobe Sign ip adresses need to be able to access the url.

See also the security section on the link you shared.

Sign up

To post, reply, or follow discussions, please sign in with your Adobe ID.

Sign in to Adobe Community

To post, reply, or follow discussions, please sign in with your Adobe ID.

Scanning file for viruses.

This file cannot be downloaded