With OpenID, I wonder whether people would appreciate the option to "outsource" their authentication. If places like domain registrars supported it then people

With OpenID, I wonder whether people would appreciate the option to "outsource" their authentication. If places like domain registrars supported it then people could take the option most convenient for them. Some people would just use OpenID to their email provider, others could pick providers who use two-factor auth of various kinds (and pay for the extra SMS costs there, without the site themselves having to support it). The really paranoid could have SecurID-style keyfobs for every site if they wanted to.