Also, we now have formal proofs for the security of the OAuth and OIDC protocols.