This not so new info may bring some lights :
http://www.fact-index.com/a/au/auguste_kerckhoffs.html : "... the
security of a cryptosystem must depend only on the key, not on the
secrecy of any other part of the system."
Peter Swire wrote:
“full disclosure” and computer security:
http://papers.ssrn.com/sol3/papers.cfm?abstract_id=531782
The paper begins by analyzing the
cliché that “there is no security through obscurity.” It observes that the
traditional military and intelligence cliché is that “loose lips sink
ships.”
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
