> I would amend it differently:
> "Never, ever use obfuscation if it adds complexity for yourself."

Actually, that's a good addition; I'll second that!

> Unless you have cover by an object that will stop the small
> arms fire from the other side, but at the same time so well
> concealed your side doesn't see you and you die from
> 'friendly' fire when your side bombs the opponent.

This illustrates a problem with analogies from the physical world - at a
certain point, they break down and can be pulled in any direction.

> Obfuscation can hurt the obfuscator, just like a firewall can
> introduce a risk to an otherwise well protected computer.

This is absolutely correct, and with regard to the encryption of URL and
form values, I would say they fall into the category of things that might
cause more harm than good.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
phone: 202-797-5496
fax: 202-797-5444
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]

Reply via email to