TLDR; Are there precedents saying not to obfuscate encrypted data?
If I'm using some standard, and a client is using the same standard, the only thing we pass back and forth is the key. This is how standard encryption works.
But is there any documentation for or against obfuscating the data further? Thus making it essentially worthless unless you have the key and ALSO know how to un-obfuscate the encrypted data?