2013-11-04 UTC
# 
@kevinmarks a post from @timbray that illustrates the need for identity binding rather than single sign-on https://www.tbray.org/ongoing/When/201x/2013/11/02/Oauth-2-refresh-token-trick #indieauth (twitter.com/_/status/397463616019918848)