Re: Safely storing an application's API keys

2021-01-18 Thread Jacky Alcine
That just pushes the problem down to the user though, no? That's not necessarily user friendly (how many average people know what an API is or why they need keys). The mention of IndieAuth is notable since it removes this problem altogether but it's not widely adopted enough. I think that the

Re: Safely storing an application's API keys

2021-01-18 Thread Stephane MANKOWSKI
Hi, In Skrooge, we have a plugin to download prices from coinmarketcap. For that, an API key is needed. We decided that: If the end user wants to use this plugin, he will have to request a personal API key and store it in Skrooge that will use it to call the service. By doing like that, we don't n

Re: Safely storing an application's API keys

2021-01-18 Thread Thomas Baumgart
On Montag, 18. Januar 2021 17:20:31 CET Volker Krause wrote: > On Montag, 18. Januar 2021 12:21:30 CET Jean-Baptiste Mardelle wrote: > > Hi all, > > > > For Kdenlive, we are planning to expand the use of online services to > > download ambiance music or videos for use in personal projects. To thi

Re: Safely storing an application's API keys

2021-01-18 Thread Volker Krause
On Montag, 18. Januar 2021 12:21:30 CET Jean-Baptiste Mardelle wrote: > Hi all, > > For Kdenlive, we are planning to expand the use of online services to > download ambiance music or videos for use in personal projects. To this > purpose, most online services provide us an API key that is used to

Re: Safely storing an application's API keys

2021-01-18 Thread Thiago Macieira
On Monday, 18 January 2021 03:21:30 PST Jean-Baptiste Mardelle wrote: > Hi all, > > For Kdenlive, we are planning to expand the use of online services to > download ambiance music or videos for use in personal projects. To this > purpose, most online services provide us an API key that is used to

Re: Safely storing an application's API keys

2021-01-18 Thread Wolthera
On Mon, Jan 18, 2021 at 3:55 PM Nicolás Alvarez wrote: > > > Protecting an API key on a locally-running application is impossible even for > a closed source app. It's equivalent to the impossible task DRM intends to > achieve (hiding the content decryption key from the user while decrypting > c

Re: Safely storing an application's API keys

2021-01-18 Thread Nicolás Alvarez
> El 18 ene. 2021, a la(s) 08:22, Jean-Baptiste Mardelle > escribió: > > Hi all, > > For Kdenlive, we are planning to expand the use of online services to > download > ambiance music or videos for use in personal projects. To this purpose, most > online services provide us an API key that

Safely storing an application's API keys

2021-01-18 Thread Jean-Baptiste Mardelle
Hi all, For Kdenlive, we are planning to expand the use of online services to download ambiance music or videos for use in personal projects. To this purpose, most online services provide us an API key that is used to identify our app (Kdenlive) when querying their API. Does anyone have experi