I wrote: > But at that point [requiring whitelisting] you've > crossed the Rubicon and lost "user-centric", leaving just an > alternative technical protocol and built-in discovery. Andy Powell replied: > Thinking creatively around delegation might also leave you with a > significant chunk of the "user-centric" value in place? I don't see how user-centricity is divisible: either I can in extremis set up my own OpenID Provider and still be an equal player in the game, or I can't. > And simplifying "discovery" removes one of the major usability hurdles > in current systems. Granted, it replaces it with a different one (at > least)... the whole, "whaddaya mean my user-id is a uri?" type issue, Leaving aside the problems with URLs as usernames etc., OpenID would only remove that hurdle if it was used exclusively "instead-of" current systems. However, if you are interested in crossover, it seems more likely that both would end up being used "as well as", so discovery wouldn't go away. Fiona.