Can I get away with this? Let's say I want to provide limited access to some content, but I don't want to deal with account creation or anything like that.

Can I just (randomly, securely) generate some long random garbage hash string and use that as an URL? I would never link to it from elsewhere, disallow robots from crawling the parent dir, and turn off directory listings in Apache.

It seems like the only way to find the content would be a) to have received the URL from me, or b) scan the entire space of URLs under that directory, which would take a heat-death-of-the-universe amount of time.

Google does this with access to docs - anyone with the link can edit, but no one's ever going to guess the link. They seem pretty on the ball, too.

edit: I put a private link somewhere! Email me if you find it.