arrow_back Back to Articles

HTTPS required for Twilio Functions and Assets webhooks starting September 24, 2026

Twilio January 22, 2026 medium impact

Twilio to Mandate HTTPS for Functions and Assets Webhooks by September 2026 Twilio is implementing a security enhancement by requiring HTTPS for all traffic to Functions and Assets webhooks starting September 24, 2026. This change means customers must update their existing webhook and callback subscriptions to use HTTPS URLs. After the specified date, any HTTP requests will receive a 301 redirect response, which could potentially disrupt existing Functions. The move is aimed at improving security and ensuring encrypted communication for Twilio's serverless infrastructure.

Key Takeaways

  • arrow_right_alt Customers must transition all Functions and Assets webhooks to HTTPS by September 24, 2026
  • arrow_right_alt HTTP requests will be redirected, potentially causing service interruptions
  • arrow_right_alt The change is a proactive security measure to enforce encrypted communications