[support] Private vs public files

[Andre Durudas]

Hello,

I am confused about the difference between the private and public file 
system on Drupal. As far as I understand I can access public files via 
their URL but that is not possible for private files. Is this correct? 
And is this the only distinction? Is it actually 'safer' to have the 
private file system enabled?

In this context, does anyone know how to best use IMCE with the private 
file system? I cannot upload files into nodes with the IMCE browser 
unless I uncheck the box "Disable serving of private files" in the 
'Common Settings' of IMCE's configuration page. And if this setting is 
unchecked, can anyone with the URL access those files? This somewhat 
defeats the purpose of the private file system, doesn't it?!? Are there 
modules I could use to restrict access to those files? Or do I not 
understand this correctly?

I would appreciate any comments, tips, hints.

Thanks a bunch,
Andre