In theory it works like a charm, but did anyone actually attacked for months? Speaking of web apps, locally it can work fine but in reality the more people are requesting the server the longer it will take to process our request. Days turn into years, and you have no idea if you're on the wrong path.