[OpenID] Security related Use Cases?

[Allen Tom]

Dick Hardt wrote:
> Have you tested the OP user experience with a malicious RP?
As a quick followup, we did some BBAuth usability testing a couple years 
ago, and several of the test subjects refused to enter their 
YahooID/Password on a non-yahoo site. In other words, many non-technical 
mainstream users instinctively rejected the phishing anti-pattern, which 
was surprising and encouraging.

Allen