3 ms·

Until the site that you use for OAuth gets hacked.

• acdha 13y ago
  Security is all about pragmatism: is it more likely that Facebook / Google will be hacked and not deal with it quickly or that users will react to incessant password nagging by using weak ones? When someone's account is compromised, is it better if they have to change one password or hundreds?