Why? Firefox already stores passwords in a local database and it wouldn't be that hard to automatically log users into sites. The method they describe here re

Why? Firefox already stores passwords in a local database and it wouldn't be that hard to automatically log users into sites. The method they describe here requires every web site be changed and requires cross-domain JavaScript to be enabled such that browserid.org will know which websites you visit. You _could_ place include.js on your local domain to avoid this issue. However history has shown that sites will tend to just cross-domain link to googleapis or yahooapis. Additionally, this is yet another web authentication method that should probably be handled at a lower level in the stack -- either the HTTP protocol, transport layer (TLS) or perhaps in the future, by using IPSec.