websockets at the very least had a reference implementation. but it was more along the lines of "it works for me, i tested it on my local machine"

it took ages long discussions to get the point across. "yes, but on your local machine you don't have a reverse proxy like every other normal web application stack". it's going to break if we do it this way and they just kept responding.

"but it works here"

what about the oauth2 spectactle?

http://hueniverse.com/2012/07/oauth-2-0-and-the-road-to-hell...