Re: Concepts: Security and Obscurity

[work () moltenplanet com]

Hi

I agree with much of what you say, in that obscurity may provide a layer of additional complexity that increases the 
work involved in breaking into a sytem and from that perspective is a delaying mechanism, however the question remains 
as to whether it adds anything of real value to a properly secured non-obscure system.

> From my perpective the example used is weak as the system relies entirely on the authenticated SSH for security, if 
> this is properly secured using an authentication server then what is the port knocking needed for.

Reently a number of studies and designs have been mooted around authenticated port knocking, however this really seems 
a way of replacing the ideas dependance on obscurity. 

Best regards
Mark Sutton