Do I need to password protect my web application if it is on an obscure URL?

Question

If I have a script, I want to be able to run an instant notification and have it on the public server side on https, and as long as I keep my own personal cache from prying eyes, as safe as the "behind the public" script. in which I would have to log in with a username and password to create an instance?

For example, consider these two methods:

1) I log in with the username: xxxxxxxx, password: yyyyyyyy (say with ssl or cpanel and then run the script)

2) I just run this path from my iphone, https://www.iamsilly.com/xxxxxxxx/yyyyyyyy/myscript.php

By eliminating the possibility that someone can pick up my iPhone and see in my story, is there any practical difference between the level of security between the two security systems? Is complexity not quite the same? Is https not encrypted enough to make https complexity as secure as logging in?

Thank you, I apologize if this topic was discussed with death, but after reading a bunch of messages about it, I still do not quite understand!

EDIT: Keep in mind that a path with a randomized 8x8 double directory contains 7 quintillion (seven billion billion) combinations, and only if I have to use alphanumeric characters.

Answer 1

You say: "I don’t need to lock the front door if it is not visible from the street, right?"

You assume that you know how this attacker will find his way to your site. You do not do this.

You assume that one person is trying to get to your site. It will probably not be a person, and probably it will not be one. Intrusion attempts scale very well.

I put my seat belt in the car no matter where I go, even if I literally drive a quarter mile. It’s safer and I don’t spend time thinking about whether I need to do this. Put the password in your application and do not waste time figuring out whether it is worth it or not.

Answer 2

No, Security through Obscurity is not security.

Answer 3

I think the answer is: “How bad would it be if someone could handle this?” then act accordingly.

“It will never happen” always makes me paranoid.