Chrome's geolocation fails daily due to API limit

Re:Chrome's geolocation fails daily due to API limit by jpatokal on Wednesday August 09, 2017 @01:17AM (#14965739)

You can apply on server-side restrictions on Google API keys:

https://developers.google.com/maps/documentation/javascript/...

https://developers.google.com/maps/faq#keysystem

The most secure approach is to get a premium plan with a cryptographic key and sign your requests serverside. This is complicated/not feasible for some APIs and client-side applications though.

Disclaimer: Googler, used to work on Google Maps, nothing to do with Chrome.

[ Parent | on HN ]

Re:Chrome's geolocation fails daily due to API limit by ec109685 on Wednesday August 09, 2017 @10:31AM (#14969284)

That still doesn't really protect the underlying API from abuse because the intermediate server could be abused by someone who stole that intermediate server's API Key from the app. The benefit is that folks wouldn't have full access to the underlying API, but it may be enough depending on the evil doers purposes.

[ Parent | on HN ]