I like OpenID and wish more places would use it, but that's only because I can recognise a dodgy Google sign-in when I see it. For the masses, the browser boun

I like OpenID and wish more places would use it, but that's only because I can recognise a dodgy Google sign-in when I see it. For the masses, the browser bounce is a big problem, as we're relying on the user to recognise a genuine login page (as you noted). I'd prefer to configure the browser with my OpenID and let that deal with the request.