It is a shame that A10 and A7 were rejected. In our mobile held, APIs are often unprotected because authentication is hard for machine to machine transactions.

It is a shame that A10 and A7 were rejected. In our mobile held, APIs are often unprotected because authentication is hard for machine to machine transactions. OpenID and the misused oAuth are a solution but it is hard to implement. A7 addressed an organizational issue completely absent from the top 10. Since there à so much controversies, they sold have made it a top 12.