Great comparison. As a sidenote, basic authentication is part of the HTTP standard, so suggesting a truly open, standards based way of identifying a user for t

Great comparison. As a sidenote, basic authentication is part of the HTTP standard, so suggesting a truly open, standards based way of identifying a user for the purpose of accessing a service/system is not such a crazy idea. It's not a dying concept, so there's scope still there.