Comment by edoceo

I make an API, for narrow use case. All calls have to be from a registered UA, among other things forms the HMAC sig.