Authentication is an important part of OAuth for me. If you fall back to standard HTTP authentication (Basic/Digest), client-side applications need to know the

Authentication is an important part of OAuth for me. If you fall back to standard HTTP authentication (Basic/Digest), client-side applications need to know the user passwords. This isn't perfect even when there are passwords, but it doesn't work at all when there are no passwords (like when the site is an OpenID consumer). Isn't that the problem OAuth was trying to solve?