Hacker News new | past | comments | ask | show | jobs | submit login

But if you don't do the validation postback, anyone can fake an IPN message if they know your IPN URL.



I'm just saying the validation is not required. There are different ways to ensure the IPN is valid.




Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: