Ideally ALL protocol (by the definition of it) ought to be openly defined. The authentication to use the protocol is another thing. Of course, security by obscurity is how the banks talk to each other.