Good stuff.

"Free your feed from authentication or invalid SSL certificates for use in the feed reader of your choice." I wrote a command line version of this a few weeks back, but this is much nicer.

I'm fairly neutral about OpenID, and I think the spec itself is fairly explicit about not attempting to solve the problems listed herein. That said, there's a ton of real-world, right-now problems to tackle here.

a nice variation on restful_authentication

maybe a Rails ACL plugin that isn't so-so?

everyone wants to outsource their auth