Auth-codes for transfers are supposed** to be a good thing.
Unfortunately, they are untrusted tokens. They are a great way to demonstrate identity in a casual sense, but don't really do a great job of demonstrating intent or identity in a stricter sense.
--
-rwr
"Don't be too timid and squeamish about your actions. All life is an experiment. The more experiments you make the better." - Ralph Waldo Emerson
Got Blog? http://www.blogware.com My Blogware: http://www.byte.org
