On: Yes, Obscurity is a Legitimate Security Layer

[damncabbage]

I was with you up until port knocking.

The problem with the implementations I've seen is that the daemons themselves can introduce vulnerabilities. Why bother compromising OpenSSH when the lesser-used port-knocking daemon is vulnerable?