[sghosh2]

The checksum validation was something I hadn't come across before. Interesting way to minimize the load on the API key store.

[molmorg]

Yeah, some folks might consider going further and use hashes that salted or one-way encrypted via key so that nobody else can recreate the checksum. Some performance tradeoffs but can prevent some other vectors like cache-filling etc.