> all the auth protocols are due for a rework, > but honestly i don't think anyone cares > enough to see it through, myself included.
Posting some guidelines, not least _known_ good reasons to do it, may encourage someone to go ahead. In fact, it would also make for useful suggestions for GSoC projects. ++L
