Why Identity and Authentication Must Remain Distinct (2006) | Hacker News Reader