Webhook signatures let you verify that webhook messages are actually sent by Svix. Without verification, forged webhooks can be sent to your endpoint.