[ehutch79]

So the only thing protecting classified docs is the public not knowing where they are? That's what security through obscurity is.

[HeatrayEnjoyer]

No, it's not the only thing, but it is one layer of defense in depth.

No one is saying that obfuscation should be the only layer. Your defense should never hinge on any single protection layer.

[ehutch79]

So we're all agreeing here. It's ok to hide stuff from sight, but hiding stuff from sight isn't actually security and can't replace at the very least, having password protection.

[HeatrayEnjoyer]

But it is security. It's one layer of it.