I overheard the following statement today:
We shouldn't use /api (e.g. in a RESTful URL like /api/v1/users/get) in our RESTful URLs anymore because it makes it easier for people to Denial Of Service attack our site. If we just give it a name like /users/get then people will be less likely to think it's an API and therefore won't be bothered DOS'ing us.
I thought this was a crazy statement and pointed out that large websites like Twitter use this same URL format, to which the person replied
Just because they do it doesn't mean it's ok
Is there any merit whatsoever in this person's statement? I completely disagree with him. I would say that if someone was that intent on DOS attacking our site then a different URL format in our API certainly isn't going to stop them!