Since the site did not accept the comment… This is a reply to: http://eternallyoptimistic.com/2010/04/20/xauth-first-take/ XAuth seems to be nothing but a shared cookie, so it may not be