I was playing about with youtube's API yesterday and did some research about its security. Now.. I have a website which I would like to apply Youtube API for it and I just wonder how NON-secure is to display project's API key? I would be using js for that and I mean there is no way I can hide it anyways as everyone who really is looking for it would be able to find via inspect element or just a source code..
Is it enought just to specify a domain name you are using this api key with so no one can use it?
If I am completely wrong please give some information regarding this question.