Storing Credentials Securely
gojomo: Mint actually doesn't store your credentials. Rather, as I understand it [1], you essentially delegate to them certain read-only privileges for your accounts. Then, they use their own highly-authenticated channels to the financial providers to request only what they've been authorized to see.They don't retain your own credentials; they've even said they don't retain exact knowledge of who you are -- just how to get your transaction stream and attach it to your Mint reports.Apparently, they leverage the preexisting service for doing this established by Yodlee, a company that dates back to the first net boom and initially had a multi-account dashboard that did login for you, but evolved to a service for doing this in a more secure way.[1] my understanding based on the link timf provided in this prior thread -- http://news.ycombinator.com/item?id=412715 -- and other research around that time