I have written a Golang command line program, the ...
# general
g
I have written a Golang command line program, the code is open source, I want to integrate your statistics in this command line program, but I see in the code to create the Client needs to write the write key into the code, so that everyone can see my write key, I am a little afraid
e
rudderstack is for client-side analytics. as with (nearly?) all client-side frameworks, there is little security for variables like this. they can always be decompiled etc.. so we all have to live with the risk that URLs/keys for client services can potentially be used to push some unwanted data to our tools…
1
g
I understand the risk of malicious data being pushed, it's inevitable and I can live with that, but what else? Is there anything else the write key might be used for? If that were the case, I would have written the write key to the client and distributed it publicly. There would have been no need to create a background interface to hide the write key
b
Write key has to be exposed on client side. Max someone can do is send malicious data, nothing else. I don’t think it make sense to hide write key.