[redxaxder]

No more than keeping your encryption keys a secret is security through obscurity.

Even if you're transparent about your overall scheme, you need to keep some execution details hidden.

[gcb]

no. security and government decency is telling everyone "we spend x billions here and use z and y to encrypt access to it"

what happens is "we spent x billions on toilet seats (to quote an alien movie) and password go over the air unencrypted, but we are not telling you the frequency"