This is a huge step in the right direction. However, my personal vision is taking this one step further with an 'identity management' daemon running on your co

This is a huge step in the right direction. However, my personal vision is taking this one step further with an 'identity management' daemon running on your computer or a hardware token which acts a cryptographic agent on behalf of your identities. So firefox, chrome, or whatever application could request a credential for some service and your daemon would pop up and ask you which identity's credentials to use or if you'd like to make a new one (U2F or some other system).