2014-07-03 UTC
# 
JonathanNeal If I am right in this understanding, I see no reason not to let my own website authenticate me, say, with a JSONP call to /whoami.js that executes whoami(my_data) or requires whatever further authentication methods I prefer for my own site. I control the blanket or selective whitelisting of other sites, etc.