A team of developers and myself are designing a web application and I am in charge of user authentication. I want to provide options such as Facebook Connect and OpenID via Google, Yahoo, etc., but we also need our own authentication method if no one wants to use either of those options. I really really want to avoid password authentication, but if I have to I will do it. Do you think SRP would be a better option, or is there something I am overlooking that would be easier for the user? Thanks
