Is it OK to return a HTTP 401 for a non existant resource instead of 404 to prevent information disclosure?
Is it OK to return a HTTP 401 for a non existent resource instead of 404 to prevent information disclosure?