danielboven

This plugin can sign the webhook events sent by the Gravity Forms WebHooks Add-On to your endpoints by including a signature in each event’s <code>X-Gform-Signature</code> header. This allows you to verify that the events were sent by the Gravity Forms add-on, not by a third party. As of right now, you must verify the signatures by manually using your own solution. However, an example of a Node.js (JavaScript) implementation is linked below.
Before you can verify signatures, you need to retrieve your endpoint’s public key (more information at <a href="#how%20can%20i%20verify%20the%20signature%3F" rel="nofollow ugc">this question</a>).
This plugin uses the same keys for every form and endpoint, meaning that the same keys will be used for every signature generated.
<h3>Verification implementations</h3>
<ul>
<li>Node.js: See the example on <a href="https://github.com/danielboven/gravity-forms-webhook-signature/blob/main/examples/NODE_JS.md" rel="nofollow ugc">Github</a>.</li>
</ul>

Webhook Signature add-on for Gravity Forms

Add a signature HTTP header to webhook requests to prevent man-in-the-middle and replay attacks.

philipjewell

Enable and forget! Once the plugin is active, it will place a badge/bar in your site’s footer that displays the current status and certificate issuer for your SSL certificate to notify visitors that your site is secure and who it was verified by. When active, the badge will serve as a link to SSL Shopper to backup the plugin.

SSL Verification Badge

Plugin will display the current status and certificate issuer for your SSL certificate in the footer of your site.

Webhook Signature add-on for Gravity Forms vs SSL Verification Badge