4 ms·
Would you consider my private keys secure if I posted them here and said that I would rotate them as soon as someone uses them in a way I don't like?
by placeybordeaux 9y ago
Would you consider my private keys secure if I posted them here and said that I would rotate them as soon as someone uses them in a way I don't like?
- jchanimal 9y agoIt's common for client applications to encode a client secret. Many API client apps use a model like this, for example Firebase calls their equivalent token an API Key. The "secret" in this case is really being used to select a context. So the secret you'd embed in your copy of the app would differ from mine, and it would point to your database, not mine.