title: Account key vs shared access signature
body: <p>I'm looking for guidance on how to securely use azure storage in an public facing production environment. </p>
  
  <p>My simplest scenarios is multiple windows 8 store clients uploading images to azure. The account key is stored in app.config. </p>
  
  <p>Is it ok to distribute the account key as part of my mobile application?</p>
  
  <p>Or should I have a backend service that creates shared access signatures for the container / blob? </p>
  
  <p>Thanks in advance. </p>