How I can be sure that Bondora is the one sending me data over webhooks?

You can validate all our webhooks with HTTP signature. Under webhook edit, you can define a key ID, which you can use to validate the webhook request is from Bondora You can read about the standard

My application is running on a system that has dynamic IP, will there be Ipv6 support?

This is in our list and the change will be made based on the feedback and after we have reviewed the system during the new throttling period.

Why do you use TCP/IP and not websockets to keep the connection open?

This is in our list and the change will be made based on the feedback and after we have reviewed the system during the new throttling period. It is when the system might need such a change.

Will I be able to use the API to create/edit/delete my webhooks?

This is in our list and the change will be made based on the feedback and after we have reviewed the system during the new throttling period.