3 ms·

You can apply on server-side restrictions on Google API keys: https://developers.google.com/maps/documentation/javascript/get-api-key#key-restrictions https://

You can apply on server-side restrictions on Google API keys: https://developers.google.com/maps/documentation/javascript/get-api-key#key-restrictions https://developers.google.com/maps/documentation/javascript/... https://developers.google.com/maps/faq#keysystem https://developers.google.com/maps/faq#keysystem The most secure approach is to get a premium plan with a cryptographic key and sign your requests serverside. This is complicated/not feasible for some APIs and client-side applications though. Disclaimer: Googler, used to work on Google Maps, nothing to do with Chrome.

ec109685 9y ago
That still doesn't really protect the underlying API from abuse because the intermediate server could be abused by someone who stole that intermediate server's API Key from the app. The benefit is that folks wouldn't have full access to the underlying API, but it may be enough depending on the evil doers purposes.