Should API Secrets Be Hashed?
问题 It might sound like a silly question, because passwords of course need to be hashed and never store the original. However, for API secrets, generally I see them displayed in the clear when signing up for them. For example, if I go to the google api console and look at my credentials page, I can view my client secret, same for twitter. Surely api keys are just as sensitive as passwords? Is it just because from the provider side, you can be confident that a sufficiently strong password is being