3 ms·
Obscurity is not a security layer.
by scrumption 8y ago
Obscurity is not a security layer.
- Someone1234 8y agoSo a password or private encryption key isn't security?
- deleted 8y ago[deleted]
- rurounijones 8y agoObscurity is a perfectly fine security layer as you said yourself (i.e. it is one of many layers). Relying ONLY on obscurity is a failure.
- pluma 8y agoWhat is a UUID if not a fairly predictable object-based shared authorization token? EDIT: I'm mostly kidding.
- quickthrower2 8y agoJust call it an object-specific API key, that forms part of the URI instead of being a header value. Since we are using https it's all good.