You Are on position re: details leakage and this should be a very important consideration for any person rolling their own personal authentication/authorization plan. +1 for mentioning OWASP. In reaction to both hacktivists and increasing cybercrime, governments, major firms and Laptop giants worked tricky to further improve their devices. Cybersecurity http://pigpgs.com