> You should validate that the request is signed correctly
I agree with you here, but wondering what you see the benefit of per-app PKI is, versus signing all webhooks with the same cert. Is it to prevent having to do a key rotation that would impact every webhook consumer?
> Hasn't this pandemic pretty well proved that when people aren't at the office they want a little more space?
Yea, and they want a pool and a free pony too. Given that people can't all get the housing they want, how do we solve for the housing problems we've run headlong into?
Building more housing is absolutely a meaningful way to attack the problem, and zoning reform is a part of that.
> Do people actually want to live in highrises in megacities? Or do they just do it so they can land a decent job?
Of course jobs are the driver here, but that means that incidentally, yes they do want to live in high-rises in megacities. There's no real sign of large cities releasing their hold on productivity and good paying jobs, the current remote work in a pandemic thing not withstanding.
> The zoning reform people only ever look at one side of that equation.
As someone who has faced the SF Bay Area housing crisis over the last ten years, I'd be fine with people moving out. But it's not a realistic solution, given that the good jobs are still here. Not to mention, there's not much we can do to reverse the economic incentives that bring people to places like San Francisco, but there is something we can do about local zoning rules. So it's entirely rational that people focus on building housing in these cities rather than trying to convince people not to move here in the first place.
I agree with you here, but wondering what you see the benefit of per-app PKI is, versus signing all webhooks with the same cert. Is it to prevent having to do a key rotation that would impact every webhook consumer?