Hot answers tagged rate-limit
The page where you can find the API key for your registered application says that the key doesn't need to be kept secret: [The key] is not considered a secret, and may be safely embed [sic] in client side code or distributed binaries. Abuse is typically an issue for the end-user, so you shouldn't be concerned about it beyond recognizing backoff ...
The documentation for the response wrapper defines the backoff field as an integer, so you can expect it to come back in the first form. I don't believe there's any way to graciously test a backoff response short of actually angering the API (which I'd recommend against).
Only top voted, non community-wiki answers of a minimum length are eligible