Let's consider such an example:
I'm an author of application like
Google Chrome. I would like to my application sends anonymous telemetry logs to my server. How do I prevent somebody to use my server API to pretend he is my application to insert some malicious / spammy logs?
User of that application might be anonymous. Would it be valuable to set some quota to my API that would prevent too many logs from the same source in some span of a time?
How would you approach that? How big-tech companies do that? How google do that with their
Chrome application? Microsoft with
Also, would it be possible to access some API only by signed application?