Persona was launched in July 2011. It's been two and a half years, and they still haven't declared it safe to actually verify anything locally; you're still supposed to load a random Javascript file from their domain that will spawn a window with their contents.

I'd have thought the whole point was to target people who didn't want a centralized system.