I think it is well established that HTTP Authentication needs a major kick in the ass and OpenID and OAuth may get us most of the way there. However, until I see RFC#s attached to both I’m hardly going to consider them to be complete. I propose the creation of an IETF WG on Identity and Authentication. The WG would be chartered to produce two RFCs covering each of the two areas. OpenID and OAuth could be used to seed the WG effort.
Sign in with 
OpenID
Interesting and not altogether a bad idea, though it seems fairly redundant since OAuth in particular relies on so many pre-existing RFCs.
Given the approach we took with OAuth we could probably generate a couple RFCs all the same. What is he particularly most interested in having cleared up?