According to wikipedia: > The decentralization aspects of the protocol reside in the theoretical support of any identity provider service, while in practice it

According to wikipedia: > The decentralization aspects of the protocol reside in the theoretical support of any identity provider service, while in practice it seems to rely mainly on Mozilla's servers currently So we'd be putting all our eggs into Mozilla's basket, and we'd be screwed if they got hacked. There are also websites that do not use email addresses as identity, HN for instance.