I never said I liked it, I just thought that's where we might be headed. =/ As far as that goes, Google's 2-factor auth mitigates this a bit, with its "keep th

I never said I liked it, I just thought that's where we might be headed. =/ As far as that goes, Google's 2-factor auth mitigates this a bit, with its "keep this auth instance valid for X days" option. (They also have a new "permanently auth this computer by adding it to a trusted list" option, which IMO defeats the point.)