It ends DDOS's as much as putting basic-auth in front of it. If that were the case: SSL should already prevent it as well.