Is it inherently dangerous to expose/make public my API key for GCM?
问题 I am trying to figure out if it would somehow compromise users if the API Key used to send notifications to an app was made public. In what situations might it be dangerous? As far as I can tell, an attacker would also need a valid registration id in order to be able to actually send a notification to a user of the app. If it is unlikely that an attacker gets hold of a registration ID is there any real danger? Are there ways to get hold of a registration ID, which don't involve somehow