@tdpauw Could be. It makes no sense to call 3rd
parties, because I can't verify. There is an example in the talk where the app
needs to do that (send webhook alert). I solve this by setting up a real
separate endpoint which allows to veryify that the webhook was delivered by the
app.