Is security by obfuscation sufficient?
falsestprophet: First of all, Amazon S3 is absolutely not a CDN.How easy would these be to guess?There is a 1:3e38 chance of two randomly generated UUIDs colliding.What is the best algorithm to create them?http://en.wikipedia.org/wiki/Universally_Unique_Identifier#I...Should I just make them all private and use authenticated access controls?If your users don't want other people peaking at their files (DropBox): yes absolutely. If your users don't care (HotorNot), then no.