[Locke1689]

Sure, but I still think you overestimate the general security knowledge of web developers. I wouldn't be terribly surprised to see that most people aren't even hashing the passwords.

[tptacek]

I take your point: OpenID is something they might actually want to do, especially if it's promoted heavily.