Webhook Security: Client Certificate Validation Available

Mailgun now supports TLS client certificate validation for webhook traffic, providing an added layer of protection to a customer’s receiving servers. All webhook requests from ‘webhooks.mgsend.net’ include a certificate issued by DigiCert, allowing receiving servers to verify the source of the request. Customers can validate the certificate and ensure the Common Name (CN) is ‘webhooks.mgsend.net’ before accepting the request.