I've never like the idea of OpenID. I recognize the problems it attempts to solve, but by allowing OpenID, I'm outsourcing my security to other people. What if

I've never like the idea of OpenID. I recognize the problems it attempts to solve, but by allowing OpenID, I'm outsourcing my security to other people. What if the password to the OpenID account is compromised? That in turn could compromise all of their accounts. And how much do you trust a 3rd party OpenID provider? I think a better solution is to just enforce a good password policy.