Phishing sites are already using the misconception that to log-in with OAuth (or OpenID, or Facebook Connect) you enter your username and password on the site.

Phishing sites are already using the misconception that to log-in with OAuth (or OpenID, or Facebook Connect) you enter your username and password on the site. I wrote about it last month after a friend got caught by a phishing scam. http://www.antoncohen.com/2013/05/phishing-failure-of-oauth.html http://www.antoncohen.com/2013/05/phishing-failure-of-oauth....