Hacker News new | ask | show | jobs
by lordnacho 1811 days ago
> As a result I use the supposedly not ok, security by obsecurity. (Along with other normal precautions)

It's not that it's somehow wrong, the problem with security-by-obscurity is that it's often mistaken for cryptographic security of the Kerchoff kind, where you can reveal the entire scheme, minus the secret key.

Something like port-knocking is a form of security-by-obscurity that is technical enough that someone might mistake it for cryptographic security.