3 ms·
We don't allow you to change the definition of "security through obscurity" just like that! Using a public algorithm with secret key is BY DEFINITION _not_ sec
by kyberias 9y ago
We don't allow you to change the definition of "security through obscurity" just like that!
Using a public algorithm with secret key is BY DEFINITION _not_ security through obscurity. On the contrary.
- bitexploder 9y agoAgreed. Kerchoff's principle isn't really up for debate.
- ubernostrum 9y agoIn context it was fair because I was responding to a situation that was already playing with the definition, and once you allow that you have to allow taking it all the way. Unfortunately, I started my reply to the wrong comment and didn't notice until after I'd posted it and it was too late to edit/delete. tl;dr too many people have a knee-jerk "security through obscurity!" reflex action to things they don't like, and I have a reflex action of yelling at them about it, which sometimes misfires when I don't take care to reply at the right point in the thread.