The best (in terms of 'best effort') masterpost on this is at https://stackoverflow.com/questions/549/the-definitive-guide-to-form-based-website-authentication

The best (in terms of 'best effort') masterpost on this is at https://stackoverflow.com/questions/549/the-definitive-guide-to-form-based-website-authentication https://stackoverflow.com/questions/549/the-definitive-guide... It's also a perpetual work-in-progress, but that's both my necessity and design.