hard20 pts · first answer countsapi-testingwebhooksapi-security
Replaying an old webhook
A webhook's signature covers the body and a timestamp. The receiver checks the signature but ignores the timestamp. Which attack does this allow?
Discussion 0
Join free to post in the discussion.