Verification of the reCaptcha should be done on the server side only. - Githubissues

ayltai / Android-Lib-reCAPTCHA

[Deprecated] The reCAPTCHA Android Library provides a simple way to show a CAPTCHA as an ImageView in your Android app, helping you stop bots from abusing it. The library wraps the reCAPTCHA API.

Apache License 2.0

71 stars 27 forks source link

Verification of the reCaptcha should be done on the server side only. #9

Open AnixPasBesoin opened 7 years ago

AnixPasBesoin commented 7 years ago

Don't you think that reCaptcha.verifyAnswerAsync("your-private-key", "user-input", onVerifyAnswerListener); Is kinda useless? And shouldn't be provided in the API since it leaks "your-private-key"?

ayltai commented 7 years ago

Pull requests are always welcome

Flo354 commented 7 years ago

The private key should never be revealed. But we can use the api for the public part only