Comment by brudgers

5 months ago

Is this a case where security through obscurity is good, or bad? Legit question. I am curious to read the responses it may prompt.

To me; philosophically; and to a first approximation, all security is through obscurity.

For example encryption works for Alice so long as Bob can't see the key...

... or parking the Porsche in the garage, reduces the likelihood someone knows there is a Porsche and reduces the likelihood they know what challenges exist inside the garage. Now put a tall hedge and a fence around it and the average passerby has to stop and think "there's probably a garage behind that barrier."

To put it another way, out of sight has a positive correlation to out of mind.

Yes of course a determined well funded Bob suggests obscurity with Bob's determination and budget. If Bob is willing to use a five dollar wrench, Alice might tell Bob the key.