Re: This is great news but...
"Even in Scotland it's unlikely they'd be running lighting to that extent"
we only turn on the lights when guests are in
18 publicly visible posts • joined 4 Feb 2010
Nonsense, it's generally absolutely fine to call a public facing API server api, and it helps to do so. Giving it some cryptic hostname might feel more secure, but it just ends up sowing confusion. After all, it is presumably public facing for a reason: there will be client-side JS (or applications) with knowledge of the cryptic hostname, therefore trivial to gain knowledge of it via them.
Of course there's no point having the api public facing if it's either a) no-longer used; or b) only used internally by the backend or other public facing servers...