Obscurity is when the secret part is entirely based on one side of the transaction (I hope they don't find this URL) whereas security involves secrets on both sides that must be discovered (here is a key exchange where we both know a secret thing).