The third-party authentication dilemma: does Facebook pwn my site?
I’ve argued for some time that it is crazy for most websites to have their own authentication (username/password) system these days. We the users have no patience for yet another registration process, validation email flow, and password to remember Security is too easy to get wrong, unless you truly have security professionals on staff Designing [...]