For the uninitiated, please read about OpenID at the source. For a quick and dirty lowdown, all you need to know is that OpenID is a centralized password system which is supposed to be secure.

I don't like OpenID.

I don't like it for the same reasons I don't like the idea of national ID card. All someone has to do is have access to your OpenID account and they have access to all of the accounts where you use OpenID. Whatever information is stored in your OpenID account is not secure, even if they say so and even though it sits on a secure server.

Nothing is secure when you add the human factor to the equation.

Security and the human factor.

All you have to do is read how US government computers and databases were compromised by government employees to understand how it works. All the secure systems in place mean nothing when the people using the systems do stupid things like taking laptops home with huge databases on them. It doesn't matter if they're allowed to do it or not, they still do it.

Putting your private data in the hands of any single entity is asking for trouble, in my opinion. It all comes down to a matter of trust. You're trusting that the people behind that entity won't use your information in nefarious ways.

The false sense of Security.

When people start trusting a single entity with their private data, something's wrong. I've been seeing OpenID used on more and more websites. It saves the new sites from having to put their own authentication system in place. Old sites are using it as an additional authentication option.

I would never use OpenID at a website where they have more than just my basic data stored. Banks and other intensely secure systems don't use it and you just have to think about it for moment to understand why they don't and won't use it. Ever.

OpenID has its place.

If you use OpenID as a master password for blogs, forums and other websites that just want your basic information (like name and email address), I don't see anything wrong with it. In fact, I would probably use it for those purposes.

When more information is required, such as addresses and phone numbers, that's when I start getting antsy. I would rather risk an independent system getting compromised than all the systems getting compromised due to centralization.

Maybe I'm just paranoid.