4 ms·
Do people really put server keys into clients? I thought the general assumption outside of private servers is to trust nobody.
by reilly3000 7y ago
Do people really put server keys into clients? I thought the general assumption outside of private servers is to trust nobody.
- pjmlp 7y agoMany app developers are just people with some programming knowledge trying their luck into the app world, so plenty of engineering best practices never come into consideration.
- reilly3000 7y agoThis is a case for security by default. I’ve messed around with Firebase and Firestore- my experience with auth and security was painful enough that I started to look for alternatives. ElasticSearch and most of AWS would do well to make Security by Default more commonplace.
- pjmlp 7y agoI agree. That is also a reason why although I rant about the capabilities exposed to the NDK, I do appreciate it being locked down.