At what point does something count as ‘security through obscurity’?
So, I keep finding the conventional wisdom that ‘security through obscurity is no security at all’, but I’m having the (perhaps stupid) problem of being unable to tell exactly when something is ‘good security’ and when something is just ‘o…