nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

OTN Security Capabilities for Webhook API Endpoints

Raja Subramani

As part of securing the status webhook API endpoints, clarification is required on the security capabilities supported by OpenText Notification (OTN).

Can anyone share your thoughts whether the following options are supported:

Request/Payload Signature

Does OTN sign outgoing webhook requests (e.g., using HMAC or similar methods) so that the authenticity and origin of the request can be validated?

IP Whitelisting

Does OTN use static outbound IP addresses for webhook calls that can be whitelisted at the API gateway?

Mutual TLS (mTLS)

Is there support for configuring mutual TLS (client certificate-based authentication) for webhook communication?

Find more posts tagged with

Note:

If there are Accepted Answers, those will be shown by default. You can switch to 'All Replies' by selecting the tab below.

Button

Accepted answers

All comments

There are no accepted answers yet