Hmm, yes, no signatures there. Even if did exist wouldnt really make sence.
If someone viewed the source to get the key, they could get the siganture
directly (the URL is no per request unique)

But you get 25,000 map loads per day. You would need a be doing a absolute
shedload of active development to burn though that.

The damage someone else can make to that quota is also limited. Would take
some very dedicated engineering to use much of it. Even some sort of
auto-refreshing page is likely to trigger other anti-abuse measures before
can make a dent.

The motivation to use your key is really low. As mentioned it bad as a DOS
vector, and keys are very easy to obtain. Can even get away with loading
the JS api without a key.



On 5 July 2016 at 18:58, Richard Cheesmar <[email protected]> wrote:

> Thanks Barry
>
> However, I'm using the google maps and places javascript api so don't
> think you can sign those right?
>
>
> On Tuesday, July 5, 2016 at 7:21:25 PM UTC+3, Richard Cheesmar wrote:
>>
>> I have setup an api key for using amongst others the Google Maps Api, and
>> have setup referrers, including one for localhost on a specific port.
>>
>> Two questions:
>>
>> 1. Does having a localhost referrer mean anyone can use the api key on
>> another their own development environment
>> 2. Do localhost calls eat up your free allowance?
>>
>> Thanks
>>
> --
> You received this message because you are subscribed to the Google Groups
> "Google App Engine" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To post to this group, send email to [email protected].
> Visit this group at https://groups.google.com/group/google-appengine.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/google-appengine/976af81a-6108-4a5f-a4f2-d9e52a37124e%40googlegroups.com
> <https://groups.google.com/d/msgid/google-appengine/976af81a-6108-4a5f-a4f2-d9e52a37124e%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
>
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/google-appengine.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/CAJCAUuK4agJmi%2B5B%2ByP_uoZPKtMjMk_6%2BnL6OjK%2BKMnB2kMQQg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to