My worry is that in the interim period between this and an improved auth protocol we all agree on, devs will continue to just roll their own (much less well con

My worry is that in the interim period between this and an improved auth protocol we all agree on, devs will continue to just roll their own (much less well conceived) authentication protocols. Surely Bray's response has merit, and is more mature, this thing isn't perfect but it powers probably more logins than anything else on the web. Let's finish and standardise the 2.0 standard before moving on.