# Securing Zoom \<-\> Chatbot Webhook Communication using Client certificate (MTLS)

**URL:** <https://devforum.zoom.us/t/securing-zoom-chatbot-webhook-communication-using-client-certificate-mtls/56106>\
**Category:** Feature Requests\
**Created:** [August 19, 2021, 10:16pm UTC](https://devforum.zoom.us/t/securing-zoom-chatbot-webhook-communication-using-client-certificate-mtls/56106 "2021-08-19T22:16:56Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![gauraves](https://avatars.discourse-cdn.com/v4/letter/g/bc8723/32.png) [@gauraves](https://devforum.zoom.us/u/gauraves)\
**Post date:** [August 19, 2021, 10:16pm UTC](https://devforum.zoom.us/t/securing-zoom-chatbot-webhook-communication-using-client-certificate-mtls/56106/1 "2021-08-19T22:16:56Z")

</div>

## Using this template helps us debug your issues more effectively 🙂

**Description**  
We are aware of the verification token approach in the HTTP header available in the Webhook from and [Authenticate webhook POST from Zoom](https://devforum.zoom.us/t/authenticate-webhook-post-from-zoom/14903)

One of our customer would like an approach where MTLS is used between Zoom and the remote chat bot, or at least in the Zoom-\>Chatbot leg. In this case Zoom will need to present a client certificate to the chatbot.

Is there support for this?

**Error**  
The full error message or issue you are running into.

**Which App Type (OAuth / Chatbot / JWT / Webhook)?**  
Knowing the endpoint/s can help us to identify your issue faster. Please link the ones you need help/have a question with.  
Chatbot  
**Which Endpoint/s?**  
Knowing the API endpoint/s can help us to identify your issue faster. Please link the ones you need help/have a question with.

**How To Reproduce (If applicable)**  
Steps to reproduce the behavior:

1. Request URL / Headers (without credentials) / Body
2. See error

**Screenshots (If applicable)**  
If applicable, add screenshots to help explain your problem.

**Additional context**  
Add any other context about the problem here.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [September 19, 2021, 8:17am UTC](https://devforum.zoom.us/t/securing-zoom-chatbot-webhook-communication-using-client-certificate-mtls/56106/2 "2021-09-19T08:17:44Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.