This is why I'm gunning for BrowserID and so should you. At least someone is trying to solve the problem and doing a good job of it.

It doesn't abuse user trust and when it is fully integrated into the browser (I imagine it as a replacement for those lame http auth dialogs), it'll be a no brainer.