What about API security?
The Mollom open API uses an HMAC-based authentication scheme to make sure your key stays your key. Evil hackers cannot pluck it off the net and start checking content on your account. Since Mollom takes its enterprise users very seriously and will soon also be providing many volume-limited advanced features, it is essential that Mollom user identities are secured using an industry-grade authentication system. This is done by signing each API call to Mollom with both a private and a public key. We also add an internal reputation system on top of these keys to prevent evil users from degrading the performance of Mollom’s filters.