Using OpenID for authenticating users grows in popularity and, in fact, makes a webapp easier to use.
But what are the security considerations one should bear in mind when deciding whether to implement an OpenID or not?
Is it suitable for any kind of webapp? Or are there categories of web applications which should not use such a way of handling authentication of users?
Is it ok to use OpenID for e-commerce applications?