Whichever technology you want to use is fine. You need to publish 3 routes: /.well-known/browserid, an auth route, and a provision route.

The auth and provision routes need to be HTML pages that authenticate you however you want, and then sign a certificate with your key that you publish the .well-known file.

Here's how we did it for Gmail: https://github.com/mozilla/browserid-sideshow/blob/master/bi...