[sugar] XO identity shared via Browse

[Sebastian Silva]

Oh, also, I'd like to point to Gracie,
http://trac.whitetree.org/gracie/

It is what looks to be quite a clean and lean python(!) OpenID identity 
provider meant to be used locally or on a server and authenticate you 
against your PAM (that is your system username/password). If you are 
already logged into your system, your system can be your openID 
provider, isnt it beautiful?

It would be quite trivial to modify this to provide some proof of being 
the laptop (a certificate was mentioned?) or bug the user to confirm 
(and check for prior confirmations).

If we have One Domain Per Laptop then this would suffice. Otherwise some 
DNS cleverness at the server side could be in order.