blockchain.info api - how to determine if callback is valid.

[ytwg]

Hi, does anyone else use the blockchain.info api?
If so how do you determine that the callback is from them.
I used to use gethostbynamel("blockchain.info"); but then they changed the callback IP to one not in that list [185.7.149.10].
Yesterday they seem to have changed it again to [91.223.16.20].

Any idea how i can do this automatically without having to log their IPs and when a customer complains, update the php script?

[Zeilap]

Hi, does anyone else use the blockchain.info api?
If so how do you determine that the callback is from them.
I used to use gethostbynamel("blockchain.info"); but then they changed the callback IP to one not in that list [185.7.149.10].
Yesterday they seem to have changed it again to [91.223.16.20].

Any idea how i can do this automatically without having to log their IPs and when a customer complains, update the php script?

Use https.

[Come-from-Beyond]

blockchain.info api - how to determine if callback is valid

I use a secret code and check it on callback.