title: Android In App Billing public key in public repository
body: <p>I have programmed an open source app in which I added donations via In App Billing. Google says to "hide" the public key (<a href="http://developer.android.com/google/play/billing/billing_best_practices.html" rel="nofollow">see here</a>).</p>
  
  <p>As the app itself is open source, everyone can compile it and change the key. Currently I created a new project with a static class that returns the key. This class I use to get the key so I don't have the plain public key in my git repo. But is this really necessary?</p>
  
  <p>What is the worst thing that could happen if somebody has my public key?</p>
  
  <p>Thanks,
  Asfaloth</p>