> I've always felt like authentication is one of those things that should be completely black-boxed, to give developers the following: > - Faith in their securi

> I've always felt like authentication is one of those things that should be completely black-boxed, to give developers the following: > - Faith in their security, without understanding the underlying representations of data. Isn't this contradictory - how can a developer have faith in a black-box if they can't see for themselves what it's doing? For security, in particular, this approach seems troublesome.