> But SSH is a terrible example I’m not sure there is any such good example though. Every obscurity control I’ve ever seen has imposed costs upon the users, ad

> But SSH is a terrible example I’m not sure there is any such good example though. Every obscurity control I’ve ever seen has imposed costs upon the users, administrators, engineers... but I’ve never seen one that I would rely on to improve security posture in any meaningful way. I’ve certainly never seen an obscurity control that was worth its opportunity cost. I can think of dozens of actually useful controls where even a marginal improvement in operational performance would be worth more than every conceivable obscurity control combined.