Hacker News Reader

Good openid providers like wordpress train their users not to expect a login page on anything a authenticating website redirects them to.

And as I said in my original comment, you can't rely on user education. If we've learned anything about the psychology of phishing, it's that.