Because of this, there is no way for a receiver to determine which Pagure instance sent a message.
Should this be in the headers or in the body?
Preferably both: headers so I can determine the key to verify with without having to unsign (would be great if the project name would also be there), and body so I can verify the data and it gets passed on if I only pass on the body.
Commit d2861019 fixes this issue
@pingou changed the status to Closed
Closed