Why did the US gov decide to rely on a TLD controlled by Montenegro for this seemingly important and sensitive service?
bramhaag
TreasuryDirect's login and account recovery experience has been notorious for years, both for user experience and for people easily getting locked out for weeks. It's good they're being careful with this rollout, as it serves both individual and institutional accounts where dollar amounts involved are epic even by bank standards, and rarely checked by hand, so even single account breaches are serious.
They used to support TOTP directly, but removed it in favor of their proprietary mobile apps. It's still TOTP under the hood though, just requires a couple API calls to "activate" it.
chenxiaolong
Unfortunate it’s not login.gov but definitely an improvement over their bespoke customer identity and access management solution.
toomuchtodo
This makes me so angry.
cebert
> To set up a new ID.me account, you’ll need two government-issued forms of identity ready.
That will be rolled out before anyone can access the world wide web. And they will continue to claim it is for the protection of kids ...
comments (7)
And of course this will be used to track down illegal aliens.
[1] https://www.biometricupdate.com/202202/downwind-of-irs-decis...
Animats
bramhaag
waldrews
They used to support TOTP directly, but removed it in favor of their proprietary mobile apps. It's still TOTP under the hood though, just requires a couple API calls to "activate" it.
chenxiaolong
toomuchtodo
cebert
That will be rolled out before anyone can access the world wide web. And they will continue to claim it is for the protection of kids ...
shevy-java