So the docs state that any app can make 60 reqs per minute and there are various headers to know how many requests you have consumed in your period of time.
I imagine this is by client IP otherwise third party mobile apps would not exist.
If I make a web app where the requests to the API are done from the client (browser) I assume that the rates would apply much like mobile apps per IP. Is this correct?
Also, if I intend to develop a React app for viewing Reddit from a browser (and doing the requests from the browser) I assume when defining the app in the Reddit form I should not need a secret since it would be visible by anyone. Is this correct?