Does the basic (non-SSL) OpenID protocol use any encryption?
This depends on what part of the protocol is in effect. Some things are entirely at the site’s discretion and not part of the protocol, like how you sign on to the OpenID server. Other parts, while specified by OpenID, still give the OpenID Consumer sites a choice of security levels. This server supports every level of security. Rest assured that the central integrity of your account is protected by SSL at GetOpenID.com, and we offer OpenID Consumers the ability to verify your OpenID at at the very highest level (SSL + RSA-key-based associations). The worst that can happen is one poorly run OpenID Consumer site allows others to use your identity on that site.
