Should I IP-restrict read-only Binance API keys?
Hosting is cloud — do people still IP whitelist, or is read-only enough?
Answers
Read-only is the main control. IP restrict if egress IPs are stable; otherwise rotate keys and never enable withdrawals.