The endless browser wars
The endless browser wars
Posted Jan 26, 2021 18:25 UTC (Tue) by mcatanzaro (subscriber, #93033)In reply to: The endless browser wars by mcatanzaro
Parent article: The endless browser wars
To be clear: this is a separate issue. Since 2019, Google has required that API keys be kept secret. That is, they can no longer be included in open source projects (which presumably includes distro build systems). Everybody has just been ignoring the new rules since then. The Safe Browsing team clearly intends for their API to be used by open source projects, but it is just not possible to do anymore without violating the terms of service or somehow injecting secrets into the build process. Secrets are actually possible when building with GitLab (which is why the upstream build still has Safe Browsing enabled), but not possible for Linux distributions with fully public build systems and a goal of making builds reproducible.
