When building secure Java applications, it's important to make sure there are no plain text passwords anywhere in the code base.

Was GitHub's removal of password based authentication a security overstep? If it makes it harder for developers to get started with Git and GitHub, it was.