[dgivney]

Sharing your key seems like the most 90s approach to system design.

"Only you and the search engines should know the key.. so obviously, we want you to host it in plain text, in the root directory."

[rstupek]

The key appears to not be a fixed value so unless your server allows directory scans it seems reasonably secure?

[dgivney]

I agree, in a 90s system design meeting - security through obscurity is reasonably secure.