“groovy mother...”

OpenID provider which uses SSL client certificates, not passwords, to authenticate. Doesn’t work terribly well (I haven’t successfully logged in anywhere with it!), but a clever idea for an unphishable OpenID. [Update: I’ve got it working a couple of places now. Not clear at whose end the remaining bugs lie.]