sure. but the point is, current "sso for the web" offerings have three problems: 1) the sso provider has full visibility into where you use their service. 2)

sure. but the point is, current "sso for the web" offerings have three problems: 1) the sso provider has full visibility into where you use their service. 2) sso provider operations are opaque. 3) other internet services don't trust them. (i can't sign into my bank with Google yet) maybe we need an iana for authentication, but a decentralized database may be an easier sell. or maybe with more time more adoption will take place of the big sso providers. it still seems to be a problem to me and i favor an open solution over more reliance on large internet companies.