...because others then can find out how many visitors your site gets? Or perhaps nastier things, like guessing id's?
Foursquare growth in 2009 inferred from autoincrement IDs: http://www.flickr.com/photos/wallofhair/4232092914/
http://www.guardian.co.uk/world/2006/jul/20/secondworldwar.t...
"The statisticians believed that the Germans, being Germans, had logically numbered their tanks in the order in which they were produced."
But, if you have an internal autoincrement ID that you want to obfuscate, what's the best simple practice, minimizing token expansion?