4 ms·
Isn't this actually a great thing since it enables developers to develop Twitter clients that aren't dependent on tokens and approval from Twitter?
by kristofferR 14y ago
Isn't this actually a great thing since it enables developers to develop Twitter clients that aren't dependent on tokens and approval from Twitter?
- scorcher 14y agoYou could only make an app that would explode if/when they decide to change keys
- slig 14y agoBut they can't change those keys without isolating every installation until it's updated, right?
- dmdeller 14y agoIndeed. Constantly changing keys would cause as many problems for users of the official client as it would for unofficial clients. Twitter could make some way for the official client to fetch new keys from a server without a binary update, but then they'd have to somehow protect that mechanism from third parties... I suppose the next logical step would be to procedurally generate keys based on the date, and have only the algorithm (not the keys themselves) known to the official client. Not in any way insurmountable, but a little more difficult to crack.
- Drakim 14y agoAlong with any official client that is slightly out of date. Twitter might be hesitant to alienate their users.
- aidos 14y agoI guess twitter, and any other client would just say - key revoked, you need to update the app for it to work again. It's an endless game of cat and mouse.
- nanidin 14y agoUsing the official key in an unofficial client sounds like a problem that will be solved with the legal system, not by increasing the burden on Twitter.
- pifflesnort 14y agoMaybe. Look at AIM and the free/shareware clients for a historical example.
- mtrimpe 14y agoThe app could also just download the latest extracted keys from your server when it experiences an authentication failure.
- tubbo 14y agoOne could also develop Twitter clients that abuse the service since the regular API rules no longer apply to them..