Maybe the effort we go to as we think about the OAuth and OpenID flows and how to balance user experience verses phishing protection is in vain.

Facebook has rolled out an identity system — Facebook Connect — with a slick UI that trains a gazillion tech-naïve users to slap their identity credentials into any old website. I don’t know what to do.

Honestly, what the fuck?