# Webhook to server without TLS Cert

**URL:** <https://devforum.zoom.us/t/webhook-to-server-without-tls-cert/123506>\
**Category:** API and Webhooks\
**Tags:** recording, api\
**Created:** [December 27, 2024, 11:21am UTC](https://devforum.zoom.us/t/webhook-to-server-without-tls-cert/123506 "2024-12-27T11:21:26Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![classroom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/classroom/32/65978_2.png) [@classroom](https://devforum.zoom.us/u/classroom)\
**Post date:** [December 27, 2024, 11:21am UTC](https://devforum.zoom.us/t/webhook-to-server-without-tls-cert/123506/1 "2024-12-27T11:21:26Z")

</div>

Hello, I would like to create a webhook that notifies whenever a recording becomes avaliable to download.  
According to the documentation, the endpoint URL must be TLS certified by an official CA, however, since I have an static IP I was planning on just opening a port for the webhook in the firewall and allowing all the zoom IP’s through.

Would it be possible for the api to communicate to that port instead of using a domain and without needing to be certified?

---

<div class="post-metadata">

**Author:** ![freelancer.nak](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/freelancer.nak/32/40968_2.png) [@freelancer.nak](https://devforum.zoom.us/u/freelancer.nak)\
**Post date:** [December 27, 2024, 12:49pm UTC](https://devforum.zoom.us/t/webhook-to-server-without-tls-cert/123506/2 "2024-12-27T12:49:59Z")

</div>

Hi,

To implement Zoom webhooks, it’s mandatory to use an HTTPS endpoint secured with a TLS certificate from a recognized Certificate Authority (CA). This is required to ensure secure communication between Zoom and your server.

If you’re using a static IP, you can configure it as `https://<IP>:<port>`. However, you still need a valid SSL/TLS certificate, which can be challenging to obtain directly for an IP address since most Certificate Authorities don’t issue certificates for IPs. Using a domain or subdomain is generally the preferred approach, as obtaining an SSL certificate for domains is much easier.

For a quick solution, you can use tunneling services like Ngrok to expose a secure HTTPS endpoint linked to your local server. Alternatively, you can use a tunnel with your live server VM, which allows secure access to your webhook endpoint without requiring an immediate domain setup.

Let me know if you need further assistance!

---

<div class="post-metadata">

**Author:** ![classroom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/classroom/32/65978_2.png) [@classroom](https://devforum.zoom.us/u/classroom)\
**Post date:** [December 27, 2024, 1:34pm UTC](https://devforum.zoom.us/t/webhook-to-server-without-tls-cert/123506/3 "2024-12-27T13:34:17Z")

</div>

Would there be major distavantages at using the Ngrok method regarding security and/or traffic control? I was thinking about it but though that maybe fully securing that service would be kind of sketchy and tedious compared to restricting communication via port and firewall rules

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [December 31, 2025, 5:11am UTC](https://devforum.zoom.us/t/webhook-to-server-without-tls-cert/123506/4 "2025-12-31T05:11:15Z")

</div>

Closed on December 31, 2025, 5:11am UTC

This topic was automatically closed 368 days after the last reply. New replies are no longer allowed.