Oauth original thoughts

gistfile1.txt

Why do we use passwords?

Passwords are an easy way to handle authentication with a modicum of security

What does it mean to say we then trust the service provider?

We asusme that people aren't doing anything nefarious with our passwords and that they instead are storing salted hashes

Why does having more and more systems with logins make the average person less secure?

It's not logical/possible to keep track of login credentials for all the services for which we require authentication/authorizatoin.  

How does OAuth help?

We can use one set of credentials accross many apps

Why is OAuth advantageous for a startup business?

It adds credibility(?) and makes it easier for users - lowering the bar for them to try things out.