Thinking more about Google’s new approach to security. [tech.kateva.org] Essentially assumes user credentials are no more secret than credit card credentials. Probably wise.