Securely load a comments plugin from domains people are already logged into?
security.stackexchange.com