What exactly are you advocating for

Read the thread?

> I think every API key system should have endpoint "invalidate_api_key"

Not this.

Yes, so you are against the proposed idea.

What is your alternative idea?

No idea why you’re being so hostile here.

	▲	orf 12 hours ago \| parent [-]
		Can you point me to where I said I had an alternative? Or any rules that say you can’t discuss an ideas flaws if you don’t immediately have an alternative? The status quo is clearly the local minima, given the myriad of trade offs and different parties involved.