IRS to adopt Login.gov as user authentication tool • Hacker News Board

Re: IRS to adopt Login.gov as user authentication tool

#191

Post by zie » Wed, Feb 23, 2022, 2:50 PM UTC

megaman821 wrote: post #138

zie wrote: post #135

Earlier quoted context omitted.

Login.gov absolutely cares about your identity. Case in point: login.gov will share your SSN to the provider(irs.gov in this case), if appropriate permissions are requested.

Last time I tried to do something at the IRS website, I had to turn on my camera and have my face compared to the face they have on file to proceed. I don't think login.gov has that level of verification. Whether the IRS needs that level of verification is another question.

That's ID.me and login.gov works differently, but it does absolutely care about identity, they have multiple levels of identity permissions, one of them is , this person has a login.gov account. One of them includes an SSN #.

Re: IRS to adopt Login.gov as user authentication tool

#192

Post by nasalgoat » Wed, Feb 23, 2022, 2:53 PM UTC

dgudkov wrote: post #122

throw0101a wrote: post #46

In Canada, the Canada Revenue Agency (CRA) allows you you to leverage existing relationships with banks and credit unions, "Sign-in Partners": * https://www.canada.ca/en/revenue-agency/services/e-services/... * https://www.canada.ca/en/revenue-agency/services/e-services/... * https://verified.me/government-sign-in-by-verified-me/ You can also create a stand-alone account with the CRA if you wish. Other federal agenci…

It's not a good choice. The Canadian government still doesn't understand the internet. There should be no obligatory private intermediaries between a citizen and the government no matter online or offline. It should provide an online identity service, just like it already provides offline government-issued IDs (e.g. passports) without involving banks or other private institutions.

My favourite part of the CRA website is it has operating hours! It actually closes during non-work hours! Crazy.

Re: IRS to adopt Login.gov as user authentication tool

#193

Post by dqv » Sat, Feb 26, 2022, 7:31 PM UTC

atonse wrote: post #175

dqv wrote: post #159

Earlier quoted context omitted.

When does it ask for your identity? I just signed up and all it needed was my email, password, and my token. It doesn’t know who I am though. It didn’t even ask for my name.

They have two tiers. I love their system. The lower tier is like and Internet account. Validate with a password and 2fa, etc. The next tier is required to log in to certain sites and requires you to upload ID etc to verify. Once you have verified with that, you have an extra set of attributes to do more sensitive things on certain sites.

Interesting. I’m looking forward to it when the IRS adopts it.