Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>I'd say if you're careful they can be secure. The biggest security hole would be the people using it. It will be unintentionally shared or posted somewhere Google will index it. Design for that, and use it appropriately - like the Google docs "Anyone with this link" sharing method.</p> <ol> <li><p>Use HTTPS</p> <p>Stops the URL being sent in plaintext</p> <p><a href="http://tools.ietf.org/html/rfc2616#section-15.1.3" rel="nofollow noreferrer">Doesn't set referrer headers</a> if they click a HTTP link</p></li> <li><p>If people access your secret URL via HTTP, warn them and immediately change it</p></li> <li><p>It's <a href="http://docbug.com/blog/archives/000780.html" rel="nofollow noreferrer">not security through obscurity</a> - that's a misunderstanding of the normal use of the phrase.</p> <blockquote> <p>"A system relying on security through obscurity may have theoretical or actual security vulnerabilities, but its owners or designers believe that the flaws are not known, and that attackers are unlikely to find them."</p> </blockquote> <p>In contrast here you're being open about implementation and design. </p> <p>I don't see that this is less secure than the average password when used with a long secret URL (64 characters anyone? <a href="https://stackoverflow.com/questions/417142/what-is-the-maximum-length-of-a-url">2000 - domain_length</a>?), in combination with a tar-pit.</p></li> </ol> <p>I'm planning to use it in an app where I feel people will value simplicity above security.</p>
    singulars
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. VO
      singulars
      1. This table or related slice is empty.
    2. VO
      singulars
      1. This table or related slice is empty.
    3. VO
      singulars
      1. This table or related slice is empty.
    1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload