---
title: "Webhook endpoint validation is too strict"
url: "https://demo.myforumcat.com/q/101/webhook-endpoint-validation-is-too-strict"
forum: "Demo"
question_number: 101
category: "Billing"
tags: ["Accessibility", "Security"]
status: "solved"
solved: true
votes: 19
replies: 5
views: 269
asked_at: "2026-07-26T08:26:04.696Z"
updated_at: "2026-09-18T22:19:04.993Z"
---

# Webhook endpoint validation is too strict

Asked by Chloe Bennett on 2026-07-26 · 19 votes

We are pointing the webhook at an internal load balancer with a self signed certificate and registration keeps failing validation.

## 5 replies

### Reply 1

Sam Rivera (Agent) · 2026-07-26 · 1 vote

That check is intentional, we reject self signed certificates at registration time so a misconfigured endpoint cannot silently swallow deliveries. For internal testing, a tunnel with a real certificate is the supported path instead of the load balancer directly.

### Reply 2

Hannah Wright · 2026-07-26 · 2 votes

Switched our internal testing to a tunnel like suggested, works fine now.

### Reply 3

Elena Marsh (Agent) · 2026-07-26 · 2 votes

To be clear this only applies to registration, an already-registered endpoint whose cert later expires will just start failing deliveries, worth monitoring separately.

### Reply 4 (marked as the solution)

meow (Owner) · 2026-07-26 · 6 votes

Confirmed this is intentional, we reject self signed certificates at registration specifically to prevent a misconfigured endpoint from silently swallowing deliveries. A tunnel with a real certificate is the supported path for internal testing.

### Reply 5

Rebecca Stone · 2026-07-26 · 1 vote · In reply to Reply 4

Switched to a tunnel for our internal testing after reading this thread, works well.