Hacker News Reader

OpenID works great for this too-- you can create your own OpenID provider.

Even better, you can use your domain to delegate privileges to a third party service. Eg, I have my personal domain leetcode.net delegate OpenID authentication to myOpenID.com, but if for some reason I don't like that, or decide to host my own provider, it's as simple as changing my domain's delegation info, and I can continue to use the same OpenID url everywhere.

Sure - but that wasn't what he said. He said that requiring facebook makes him think that the website owner shouldn't be trusted with data.

Which has nothing to do w/ lock-in on 3rd party websites. It has to do w/ the relative security competence of those who choose to use FB Connect vs. those who choose email.

Who said anything about security? I would take a "Facebook only" login system to imply that the creator of the website makes bad decisions. I'd prefer to not hand over data to people who make such poor decisions.

Exactly