His proposal - or something like it - does sound very nice if implemented correctly. I work in Identity and Access Management. It would be incredible for us to be able to integrate with an external source of identity like this. Right now the best we have is email addresses, and those are notoriously insecure. There is the option to have “social login” through Facebook, Google, and the like but at the expense of tying us to one provider.