Ask HN: Thoughts on OpenID?

Coming from a security background, I think there's something intrinsically wrong with that type of authentication system.

I like to use 1Password: a different, complicated, virtually uncrackable password on every site I use.

I think that OpenID is too confusing, until presented well to the user. I'd include a short piece of text on yuor registration/login page about OpenID - and make it clear to the user that they probably already use an OpenID-enabled service (such as Google Accounts or Yahoo! which actually tell you now). Try to present it as a way to speed up registration - less fields etc.

Right now, I'd still use a classical registration system, but show off OpenID as an alternative system and allow existing registrations to link OpenIDs. I still view it as an alternative, rather than a replacement.

I don't think it's reached the point where it should be the only authentication system offered by any service.

I think it's still very confusing to the average joe, but if you stressed something like "login with your google account", with an easy button to use the Google OpenID provider to authenticate, it might make it easier for the average joe to understand. Something similar to http://www.postrank.com/login would probably be effective with most average users, IMO.

biggest issue i see is that initial effort hump required of new users. the more difficult it is to create a new account, the fewer people will tend to do it. i'd compare it to the standford marshmallow test.