What identity token would you prefer? Would it be bound to the mobile device in any way? Would it require that a canonical list of registered identities be st

What identity token would you prefer? Would it be bound to the mobile device in any way? Would it require that a canonical list of registered identities be stored server-side? How would you impose a cost on spam accounts without burdening users? Just a few considerations.