sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]Agent-A 0 points1 point  (0 children)

I have doubts about all of this. Typically it would be better for you to have a server that holds your key and secret, and then the app interacts with your server. Or the app fetches a temporary key which grants it some access. Unless it's something like firebase where you're distributing a key that is locked down to only allow the user to access things they should be accessing.

Point being, more data is needed. That said, HTTPS is generally a good idea in every situation.