Any domain can authenticate its users, Mozilla acts as a fallback if a domain does not do this. At this moment most domains do not directly support Persona authentication, so almost always the fallback is used, but the system is decentralized by design.