Webhooks fail in the real world: timeouts, duplicate deliveries, and partner outages are normal.
Idempotency keys
Consumers must dedupe. Producers should include stable event IDs and delivery attempts.
Retry with backoff
Exponential backoff plus a dead-letter queue beats infinite aggressive retries.
Signing and verification
HMAC signatures and timestamp windows reduce spoofing risk for inbound webhook endpoints.