Analysis of information sources in references of the Wikipedia article "Webhook" in English language version.
the Connect notification service has been updated to support the Basic Authentication scheme with customers' Connect servers (listeners).
Mutual TLS plus Client Access Control enables your listener app to ensure that the Connect notification message was sent by DocuSign and that it wasn't modified en route.
Another potential security hole is what's called replay attacks.