Page 1 of 1

Securely sending callbacks to remote servers

Posted: Sat Jun 01, 2019 10:10 am
by imop44
When sending a callback to a remote server, is there anything preventing the request and callback password from being read by a malicious party?

Thanks

Re: Securely sending callbacks to remote servers

Posted: Sat Jun 01, 2019 10:26 am
by Kent Briggs
The parameters are sent via POST so if your callback code is running on an SSL-enabled server and you specify an HTTPS link then the password is encrypted along with everything else. Even if not, it would require a man-in-the-middle attack. If that were possible then you are already compromised. The password option just keeps random hackers and bots from purposely (or accidentally) executing your callback code.

Re: Securely sending callbacks to remote servers

Posted: Sat Jun 01, 2019 11:06 am
by imop44
Okay great, thanks for the quick response.