Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Obscurity can certainly be part of defense in depth, but it unequivocally does not make anything more (meaningfully) secure.

For example, hiding the fact that your data is encrypted with AES doesn’t make an attacker any more likely to be able to break AES. Similarly, hiding the fact that you use a weak encryption algorithm doesn’t keep an attacker from breaking it.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: