Well said. This is why I think if OpenID is to survive, the provider must be the end user's ISP. - They already have a relationship with the user, mitigating

Well said. This is why I think if OpenID is to survive, the provider must be the end user's ISP. - They already have a relationship with the user, mitigating trust and tech support issues to some degree. - They already have the power to redirect webpages, spam the user, and find out what sites they are visiting, so you aren't giving them any more power than they have.