Is using a GUID security though obscurity?
If you use a GUID as a password for a publicly facing application as a means to gain access to a service, is this security through obscurity? I think the obvious answer is yes, but the level of security seems very high to me since the chances of guessing a GUID is very very low correct? Update The GUID will be stored in a device, when plugged in, will send over the GUID via SSL connection. Maybe I could generate a GUID, then do a AES 128 bit encrption on the GUID and store that value on the device? In my opinion, the answer is no. If you set a password to be a newly created GUID, then it is a