Multi-Machine Key's Purpose

100 Worgen Rogue
14655
I'm slowly working on a desktop application, and I have this thought that has been nagging at the back of my mind for quite a while now. Is there any reason, or incentive, for me to want to use a key? With an almost 100% decentralized java program, connections to the API should never run into throttling issues unless a user gets, for lack of a better word, ambitious. In addition to that, it seems like it would be impossible for me to not share the authentication key with anyone*. To the best of my knowledge, Java can always be decompiled, as encrypted JAR files don't add much security. Obfuscation is reliable, but it only scrambles the code and doesn't protect the key beyond that.

It seems like the only reason (in my situation) to use an authentication key is so that Blizzard can gauge how many people are using this program. Am I missing something?

* EDIT: Obviously no program is safe from having hardcoded strings ripped from memory, but Java is noticeably weaker and would quite literally display the string without launching dbx/gdb/whatever.
Edited by Pins on 4/30/2012 4:09 PM PDT
Reply Quote
100 Undead Mage
15560
There is no reason for you to get a key, and no reason to share it with users if the data is being requested via their connection.
Reply Quote
100 Worgen Rogue
14655
http://us.battle.net/wow/en/forum/topic/3280532771#4
http://us.battle.net/wow/en/forum/topic/3746635131#1

Well they do request that we apply for them. So it seems there's something else I'm missing, as getting a key seems like it would make it more likely for me to deal with throttling.
Edited by Pins on 5/1/2012 10:01 AM PDT
Reply Quote
Battle.net Developer
http://us.battle.net/wow/en/forum/topic/3280532771#4
http://us.battle.net/wow/en/forum/topic/3746635131#1

Well they do request that we apply for them. So it seems there's something else I'm missing, as getting a key seems like it would make it more likely for me to deal with throttling.


That first link is talking about web apps that live on multiple machines. You should not bother getting a key for your desktop app. It's unlikely any one user needs more than the daily limit.

The other problem with getting a key for an app like this, if ONE of your users abuses the daily request limit we don't want to shut off all of your users. It's much simpler without a key in this case :)
Reply Quote
100 Worgen Rogue
14655
Well, alright then. Thanks for the help.
Reply Quote

Please report any Code of Conduct violations, including:

Threats of violence. We take these seriously and will alert the proper authorities.

Posts containing personal information about other players. This includes physical addresses, e-mail addresses, phone numbers, and inappropriate photos and/or videos.

Harassing or discriminatory language. This will not be tolerated.

Forums Code of Conduct

Report Post # written by

Reason
Explain (256 characters max)

Reported!

[Close]