“probably because like all protocols it’s a boil-the-ocean problem”

Yeah, it get talked about that way. Although, maybe it needs only a combo-meal solution.

What’s neat about the login with email or login with IM ideas is that they’re point towards a combo-meal kind of model, e.g., you already are going to have a verified identity on one system, why not get some single sign-on thrown in the box.