Hacker News Reader

From the SDK example it looks like I am supposed to put my Plivo credentials in plain text in JavaScript. Am I missing something? Because that seems like a really terrible idea.

View on HN

The credentials can be generated dynamically from any server side language like php, python or ruby and sent to the js. Once the call is done or after a certain time these credential can be deleted using server side APIs too.

Edit:

Creating an Endpoint - http://plivo.com/docs/api/endpoint/#create

Deleting an Endpoint - http://plivo.com/docs/api/endpoint/#delete

I see. So I can create an endpoint on the server when the page is generated, give it a random password, and drop that into the page. And then to expire it I would have some background process that deletes endpoints n minutes after they are created or something?

Reply on news.ycombinator.com