Post #4497153

@sashag@anarres.family the counterargument is that historically, random small sites using username/password auth are more likely to have credential leaks