4 ms·
It seems like static hardcoded API keys are a best practice with map APIs. I'm guessing because of the large number of requests in the critical path proxying ad
by iudqnolq 4y ago
It seems like static hardcoded API keys are a best practice with map APIs. I'm guessing because of the large number of requests in the critical path proxying adds to much latency? But everyone does it.
- justinclift 4y agoOh, that seems pretty bad. Are you ok to name some map apps that are doing this, that you're aware of? That'll let others dig into those apps, (hopefully) report the security issue, and (again hopefully) get the app makers instead using a better approach for their next releases.
- iudqnolq 4y agoFor one, it's what you get following the documentation of the most popular product, Mapbox.
- justinclift 4y agoOuch. So, they're even teaching people to do the wrong thing? That's not good at all. :(