> security through obscurity is a bad idea only if that's your only defense, which it was for a lot of old crypto schemes & why the crypto community consensus

> security through obscurity is a bad idea only if that's your only defense, which it was for a lot of old crypto schemes & why the crypto community consensus was to publish algorithms/assume the attacker had the implementation. that mindset isn't universally applicable