Archived from the Transloadit support forum. Originally posted on September 28, 2011; details may be outdated, see our docs for current behavior. Original thread
Would be cool if Transloadit signed the POST notification with the private key so the recipient can validate the authenticity and integrity of the message.
Konstantin, I think you could just create your own by adding a signature of some sort into the “fields” and then verifying it when the notification comes in.
Hey Konstantin,
for now you can add a random callback in the URL to verify the message. We know that is not a perfect solution and we have this definitely in our todo list.
Kind regards,
Karl
Closing this for now.
Let us know if you need further help, Luke.