I just posted a couple pieces on Rich's site: HTTP Authentication: a Primer & When Community Is Bad: Community and Commerce — Don’t Cross the Streams!.