4 ms·
“Security by obscurity” has become so misused... it doesn’t apply to this situation at all. There’s nothing illegitimate about having a secret token for your us
by JeremyBanks 8y ago
“Security by obscurity” has become so misused... it doesn’t apply to this situation at all. There’s nothing illegitimate about having a secret token for your user ID. By the same logic, a password is false security.
“Security by obscurity” refers to the obscurity of the security scheme, not identifiers!
- cptskippy 8y ago> “Security by obscurity” refers to the obscurity of the security scheme It's not even that specific. It's obscurity of the workings of the system which may or may not have any security in place.