The Author's Nest

Every time I turn around, I see someone in the tech industry say that developers "shouldn't even try to handle passwords themselves", and to rely on things like Google SSO, Facebook Connect, and Login with Twitter. Sadly, that's insecure as well. In fact, they're as bad as using nothing but email to authenticate someone.

( More below... )