It was painful to watch, though, and security is a process not a product; five years before authentication credentials could not be stolen by the simplest of XSS attacks suggests a rather broken process.Pretty off topic so I will try to leave off here.