Don't get me wrong. It had to happen. It was incredibly insecure before the...event.

But still, every time a have to debug an opaque 401 error that's likely due to a bad signing implementation, I pine for the basic auth days.