IMO, there's nothing wrong with a little security through obscurity if:
1) It's not your main game plan, just an extra obstacle. Anything can be compromised eventually, so you buy extra margin.
2) The obscurity is agile. Similar to benchmarking password complexity vs. projected brute-force capabilities of enemies and rotating passwords accordingly, rotate the obscurity- acknowledge that your enemies will figure it out eventually, and change it up faster than you think they can figure it out.
Right. It's a solid defense-in-depth marker that usually isn't too costly to implement and adds more time/effort to the equation. As long as you recognize it for what it is, it's OK.
Comments
Sure, it's security through obscurity...
IMO, there's nothing wrong with a little security through obscurity if:
1) It's not your main game plan, just an extra obstacle. Anything can be compromised eventually, so you buy extra margin.
2) The obscurity is agile. Similar to benchmarking password complexity vs. projected brute-force capabilities of enemies and rotating passwords accordingly, rotate the obscurity- acknowledge that your enemies will figure it out eventually, and change it up faster than you think they can figure it out.
Right. It's a solid defense-in-depth marker that usually isn't too costly to implement and adds more time/effort to the equation. As long as you recognize it for what it is, it's OK.