Persona vouches for you when you sign in. Really neat, no more password leaking. The important thing here is that as Persona protocol (BrowserID)'s creator, Mo

Persona vouches for you when you sign in. Really neat, no more password leaking. The important thing here is that as Persona protocol (BrowserID)'s creator, Mozilla really really wants someone else (potentially YOU the user) to run the Identity Bridge. Currently Mozilla does this for non-Gmail and non-Yahoo users too boost adoption. So when you sign up you are asked to give a new password on sign up. If you are paranoid, you should of course give a new password instead the one you use for your email (which I assume may be reused for multiple accounts...) But being able to authenticate yourself on your own is what makes Persona useful. edit: at realworld crypto, this was given as a talk. This is Google's possible direction. http://www.ietf.org/proceedings/81/slides/tls-1.pdf http://www.ietf.org/proceedings/81/slides/tls-1.pdf