Thanks for the varying levels of explanation  (thanks to viraptor too). I think part of the reason I was confused is because GitHub&#x27;s web hook setup allows for a supplied shared secret which, based on what I understand from above, is not as secure as it could be unless the user ensures the shared secret has sufficient entropy. If I&#x27;m still not getting it please let me know. Thanks again.