4 ms·
Security through obscurity isn't a bad thing. The army uses security through obscurity by using camouflage. The only issue with it is when it is only 'security
by verbify 10y ago
Security through obscurity isn't a bad thing. The army uses security through obscurity by using camouflage. The only issue with it is when it is only 'security through obscurity'.
For example, the National Institute of Standards and Technology recommends:
> For external-facing servers, reconfigure service banners not to report the server and OS type and
version, if possible
http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-123.pdf http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublic...
- vidarh 10y agoIndeed, the biggest problem with security through obscurity is not that people use it, but when people overestimate the level of protection it gives them and reduces other protections accordingly.