I would never advocate security through obscurity. But I also don't feel that on a system of this nature the details of how it works should be in the public domain. Personally I'd prefer it if these things were kept within closed circles rather than "hey everyone here's how this works, please can you try and break it?". Not for this application anyway. Opening everything up to the world for scrutiny doesn't automatically make it "secure".