The security problems the article lists can be broken down like this: - phishing - if a relying party is insecure, bad things can happen to it - if your ID p

The security problems the article lists can be broken down like this: - phishing - if a relying party is insecure, bad things can happen to it - if your ID provider is insecure, very bad things can happen Those aren't anything new, and they're not fundamental to OpenID. Then he goes into "what if my provider is evil?", "what if i don't want my ids unified?" and "but there's no trust!", which are usually pretty good indicators that the speaker doesn't grok OpenID.