The point was to encourage users to only use oauth. They could allow basic auth only on a conscious opt-in process by the user (assume that I want to write a bo

The point was to encourage users to only use oauth. They could allow basic auth only on a conscious opt-in process by the user (assume that I want to write a bot that sends DM to my users, I don't want to mess with oauth just when I can drop my twitter password in the curl code, but I can log in to the twitter website to enable basic auth in this case). I really see the point of using oauth for almost any web-based apps, and now also for desktop-based ones. Adium does it pretty well (but one day the twitter support broke and I've been using Tweetie/Echofon since then). But it's still about access complexity: big apps have still months to rework functionality using basic auth, but in some cases, oauth is just hellish. I repeat myself, yes. Please: opt-in, twitter, we need it.