Actually, it is an inconvenient insecure mess. It just looks good at first blush. Here is my take

http://blog.atomicinc.com/2015/03/16/yahoos-on-demand-insecu...

I wonder if they put a college intern in charge of authentication services...