OpenID needs strong authentication

Here is a nice tutorial from Kim Cameron that demonstrates using OpenID for signon. This tutorial also illustrates the risks if you don't use strong authentication. Also one way to implement strong authentication with OpenID is via the Paypal Security Key which I have mentioned previously.

If your looking for more information on security tokens Information Week has a good article talking about OATH which is a industry wide group working on open authentication. Or you can go straight to the OATH site to get there latest information.