V Guruprasad posted, in reply to private mail:
> Obscurity would mean that a unique server host address exists but
> is not advertised.
>
> Invisibility means that a unique server host address does not exist
> at all. This is a harder condition.
No. Security through obscurity means any approach that attempts to protect
network resources (in this case, the server) by making them hard to find.
Your approach, then, has a weak form of security through obscurity. It
still permits clients to contact the server, which means that the server
needs to be hardened against malicious clients, which is why security
through obscurity is so poorly thought of.
I say it's a weak form because I believe you are wrong in stating that "a
unique server host address does not exist". The URL (ick) is an address
for the server; it's just a higher-level address than an IP address.
--
/==============================================================\
|John Stracke | http://www.ecal.com |My opinions are my own.|
|Chief Scientist |=============================================|
|eCal Corp. |Campbell's has it wrong--it's "Never |
|[EMAIL PROTECTED]|underestimate the power of *chocolate*". |
\==============================================================/
