just signed up. Service is a little wonky, but they've introduced 2FA via SMS and Authenticators as well! Thankfully not just SMS.
They also make you download/print a private key just in case.
Government launches login.gov to simplify access to public services
11–20 of 173 posts
Re: Government launches login.gov to simplify access to public services
#12Earlier quoted context omitted.
I know I'm not supposed to say this, but you obviously either didn't read the article or read it but didn't understand it, and perhaps you would be better off reading it more closely before commenting. The article lays out that this is not centralizing information, but is merely allowing a bunch of different agencies to use it as an identity provider. The same way I can, say, connect to my spotify via my Google+ acco…
Yes but anyone who pops your Google+ account can get all your playlists.
In the case of Google, you can trust their security over the (usually) much smaller vendor. With this? Not so much.
Re: Government launches login.gov to simplify access to public services
#13Earlier quoted context omitted.
Its important to remember that login.gov isn't an account its an Identity Provider. It will allow you to prove to an agency that you are who you say you are, but all the account information will be stored by the agency.
> Its important to remember that login.gov isn't an account its an Identity Provider. Doesn't matter, the consequenes are the same. If it is compromised or exploited (internally or externally) the exploiter can access all of your information from, and impersonate you too, all the government systems that rely on it for identity.
I don't think that was the concern being expressed by the grandparent. If the concern was the government now has a secret trove of all your information this specific product doesn't change anything on that front as it doesn't store your information it just acts as an identity provider. If the concern is exploiting this one account allow an attacker to get at all your government systems, then yes this is a new treasure trove. I am going to fall on the side of its better to have one secure account then 100 different less secure accounts. I think the industry has found this to be the case and widespread use of Password Managers and Oauth based logins backs me up on that.
Re: Government launches login.gov to simplify access to public services
#14login.gov is using "Let's Encrypt", which is kinda awesome :)
Should they have used an EV certificate?
Re: Government launches login.gov to simplify access to public services
#15We have a similar service in Hungary since 2005.
I wonder why something like this was not a thing in the US before? I mean we are not a 3rd world country but definitly behind the US in almost every aspect. Is it something to do with the relationship between the states and the federal government?
Re: Government launches login.gov to simplify access to public services
#16I'm getting "Oops, something went wrong" for nearly everything I do to create an account. Took two or three tries to get my password correctly set. Then I was given the prompt to add my phone number, but got another error and ended up signed out again. Definitely needs some work.
Re: Government launches login.gov to simplify access to public services
#17login.gov is using "Let's Encrypt", which is kinda awesome :) Should they have used an EV certificate?
Nah. DV gives you the same cryptographic guarantees, but with the benefit of 100% automation.
Re: Government launches login.gov to simplify access to public services
#18Given that this is a typical identity provider, I'm curious there's interest to make this service available to the saas industry at large.
For example, I'd rather NOT have to manage login credentials for my bank, mortgage car payment, and various airlines.
I'd rather let login.gov handle it.
Moreover, as a saas provider, I wouldn't mind deferring this liability to someone other than google or facebook.
Re: Government launches login.gov to simplify access to public services
#19Ironic that https://login.gov does not have a login form located anywhere on it. Just a teeny and hard-to-notice "Manage Account" text link in the corner.
Re: Government launches login.gov to simplify access to public services
#20We have a similar service in Hungary since 2005. I wonder why something like this was not a thing in the US before? I mean we are not a 3rd world country but definitly behind the US in almost every aspect. Is it something to do with the relationship between the states and the federal government?
the US adopted a system that was good enough at the time, and since then there is little impetus for improvement, despite the now obvious flaws. Same story for US infrastructure.
Disadvantage of being a first mover