assume we have dedicated server with webhook handler. This server probablyhas no domain name (just IP) or no issued certificate.
Option not to validate SSL certificates for Webhooks will give possibility to use self-signed certificate. If security is concern (though man-in-the-middle attack are extremely unlikely) may be you can add customer certificate upload on webhook configuration page.
Thanks for writing to us!
Unfortunately, it is not supported at the moment. However, as a workaround, you could assign a domain/subdomain, get a free SSL certificate from LetsEncrypt and then deploy. Would this work?