The fact is if your url is public with no restrictions whatsoever than you god bad security
The goal should be to ensure people going to your site know what your real address is.
The goal should be to ensure people going to your site know what your real address is.