title: Authenticity and Integrity of HTTP Requests
body: <p>I have an API endpoint where external websites can submit a POST request. 
  What would be the best method to make sure the requests are <strong>authentic</strong> and also are not tampered with, so they respect the principle of <strong>integrity</strong>?</p>
  
  <p>Since the data is not valuable such as credit card information, I do not require HTTPS integration.</p>
  
  <p>I have had a look at both HMACs and Digital Signatures, and I believe the second option would be better, yet I am unsure if this is the way to go?</p>
  
  <p>Similarly, would hashing the request and verifying it on my server be enough?</p>