microsoft/vscode-extension-telemetry

How safe is it to store the application insights key in `extension.ts`? How much obfuscation do you recommend?

hamirmahal opened this issue · 2 comments

The "Setup" section of README.md says

// the application insights key (also known as instrumentation key)
const key = '<your key>';

How safe is it to store an application insights key within a string in client/src/extension.ts?

And, how much do you recommend we try to obfuscate it?

It's a public identifier and therefore is ok to not obfuscate. Most extensions store it in their package.json https://github.com/microsoft/vscode-hexeditor/blob/main/package.json#L6

Ah, I see. Thank you for the link, and especially for highlighting the relevant line!