Say I have a website running a popular CMS like Wordpress only over SSL through HTTP Strict Transport Security. Prior, the backend administrator login page could be accessed by anybody simply by adding /wp-admin to the URL, but using a mix of mod_rewrite and a plugin, it is now obfuscated and stops brute force attacks.
Now, what if HTTP Digest Authentication was added to the picture? An attacker that somehow found the login page would be faced with another obstacle they'd need to overcome. Does this provide any improvement on security or is it just pointless?