How can we verify the integrity of the data sent from the webhook? It looks like there is nothing else possible but setting a custom header and use SSL but I wanted to check if you had any other option...
POST over HTTPS will ensure that others cannot get to the data on the wire. Custom headers are required by certain applications and sometimes contain access tokens.
If you could outline your usecase, we will be able to provide a better answer
I was more thinking about how do we make sure the post is coming from marketo? Anyone who knows our endpoint can post and manipulate the data getting in to our system. Is their anyway way to send a signature along with the data?