It's a very good talk. Sadly, you are right about familiarity. When I left out the "confirm your password 2 times and make sure it's got the following character

It's a very good talk. Sadly, you are right about familiarity. When I left out the "confirm your password 2 times and make sure it's got the following characters blablabla" element, people actually complained because they somehow felt it was insecure or a bug in the program. On the other hand, signing up via Facebook isn't that great either. If only OpenID had the foresight to include a data repository (at least for preferred username, email, pic, maybe contacts) we could have avoided the mess we see today.