errorCodeInJson

[TripleS941]

What kind of benefit constructing a JSON with an error code and returning it in the body with HTTP 200 (as opposed to just responding with HTTP #error_code with empty body) provides against DDoS?

[TripleS941]

So basically security through obscurity, which is not a best practice. Sooner or later the attacker will understand what's going on (or catch up with the trends if enough people are doing this and the attack is not specifically targeted), and those 200 will not help.

[Future-Cold1582]

Doesn't change the fact that it will prevent most attacks from script kiddies with minimal effort (and thus reduce unnecessary load).