# Subtle changes in how payloads are sent broke signature verification for consumers verifying incorrectly

- Provider: [Svix](https://down.guide/svix)
- Level: confirmed
- Impact: Degraded
- lasted 0m
- started 2023-04-10 16:28 UTC
- us
- id: DWN-4e2ee985d4
- Official page: https://stspg.io/dysjzxr50vsc

## Updates from Svix
### 2023-04-09 11:00 UTC: resolved
We changed the code to send the payload exactly the same way as it's sent to us (before, we were compacting it before sending). This meant that people that relied on the payload to be compact in order to verify webhooks (i.e they were verifying incorrectly) had verification failing. We reverted this immediately once it was reported signatures were failing for customers.
While not a bug in Svix, as people verifying webhooks correctly wouldn't have had issues, it still caused disruption to our customers and we've added tests to ensure that we now always compact the payloads going forward.
We are also working on making it even harder to get wrong for customers, but please refer to https://docs.svix.com/receiving/verifying-payloads/how for the correct way of verifying webhooks.

---
down.guide reads providers' official status pages every minute and adds its own evidence, always labeled. Free, no account. Agents: MCP at https://down.guide/mcp, REST at https://down.guide/api/v1, feeds at https://down.guide/feed. Built by Sazabi (https://sazabi.com/?utm_source=down-guide&utm_medium=markdown).
