4 ms·
Security by obscurity is when you hide implementation details to improve security. Secrets are not obscurity, randomness is not obscurity.
by staticassertion 5y ago
Security by obscurity is when you hide implementation details to improve security. Secrets are not obscurity, randomness is not obscurity.
- angry_octet 5y agoExcept that if they know you are using this technique (e.g. from snooping traffic) then it is straightforward to bypass, either by tailgating onto a recent connection attempt (if they can snoop) or just brute forcing it (they can test the whole key space in seconds). There must be better ways to leverage long term shared secrets, recent authentication success, etc. I'd like to see something like Signal's ratchet mechanism.