I've used it for Know-Your-Client type stuff with banks, but it is theoretically open to most if not all businesses. Every time I've needed to interact with it, it's been a straightforward process as a consumer.

[1]: https://www.canadapost-postescanada.ca/cpc/en/business/posta...

I've always thought that a code-signing certificate tied to a natural person should be more valuable than one tied to a faceless corporation, but the industry is (poorly) built around selling high priced certificates to anyone with enough money to start a business.

Imagine being able to get a code signing certificate in a single afternoon by signing up, taking your ID to Canada Post, and downloading your certificate after the identity verification is submitted. That would be quite the difference from the current awful experience where someone in a foreign country guesses and makes judgement calls based on the documentation you snail mail to them.

Belgium has an identity service based on this. Governmental OAuth. https://www.csam.be/en/about-csam.html | https://iamapps.belgium.be/sma/generalinfo

They publish their own eID reader (middleware) and browser extensions. https://eid.belgium.be/en

Even with an official Linux version. :) https://eid.belgium.be/en/linux-eid-software-installation

The post office used to issue normal identity cards, but today I only think it's the DMV equivalent and the police that does that.

Basically, I don't think a natural person is enough protection against malice. Something like "stick 1 million dollars into escrow, and if someone uses your cert to spread malware, we keep it" is a much stronger incentive. (Not what's done, of course.)

Keep the post office option for the folks that don't have an ID, but for most people, this would be the most straightforward option.

https://www.ceskaposta.cz/en/sluzby/egovernment/czechpoint

Its usually situated on post offices or local government offices and makes it possible to get verified electronic signature that you can then use to prove your identity electronically. It can also access various government registries, etc.

(Use your translation service of choice if desired.) https://www.sagawa-exp.co.jp/service/kakunin/

[1]: https://en.wikipedia.org/wiki/United_States_Postal_Savings_S...

[2]: https://federalnewsnetwork.com/agency-oversight/2021/10/usps...

When I opened a bank account (n26) in Germany this is how they verified my identity (along with a brief video call) as a foreigner so the idea has merit.

Both are generally available for free by being a customer of your local small bank or credit union. These could be easily adopted by web companies for password resets, account withdrawals above self-set limits, etc.

I mean the every day kind of verification that fuels our daily transactions and benefits from instantaneous info being transmitted back and forth, to easily get a credit card approved for example.

Doing this instantaneously implies skipping the heavyweight process. Which I assume means doing something like a one time (or periodic) cumbersome in-person process, and then repeating a quicker online process. Any private company could create such a system right now, bootstrapping off the notarization framework to do the heavy lifting.

But credit cards and other traditional financial institutions don't actually care about identity in such a strong sense. The standard process for setting up online access for a new account at a brick and mortar bank involves leaving the bank, going to their website from home, and entering your not-particularly-private information to sign up. That could be easily modified to setting up initial access credentials right in the bank if they wanted to, but the traditional financial system is pretty forgiving for the most part.

So we're really talking about custodians of new bearer instruments (eg cryptocurrency), which are more like cash. Hence my reference to these new holding companies being the ones that should be integrating notarization into their exceptional account access methods. Of course they could also just insist on the use of real security tokens, require a second one for backup purposes, and simply not use SMS at all.

FWIW another more convenient way of doing brick and mortar verification is to snail mail out a letter with a code on it to the address of record. It obviously doesn't have super security properties (anyone can steal mail), but it's much better than electronic-only non-verification and much nicer than surveillance database verification.

Yes from what I know, you technically do not need to get a will notarized. But getting it notarized makes it a "self proving will", which will be easily accepted by a court. If you don't do the notarization at the time, your poor executor will likely need to hunt down the witnesses and get them to sign affidavits.

When I went looking at them they were boasting with using AI, and then in the meeting it turned out it was mostly farmed out to someone in India.

Every state has its own requirements to become a notary(with one requirement being posting a $10k bond or purchasing insurance, so you have something to lose if you make an egregious mistake).

You can require counterparties notarize any documents you'd like, and reject anyone who declines. And you can do this without needing to change the law to increase the scope of responsibility of the USPS. It's illegal for the USPS to offer notary services, although they're often located near notaries: UPS Stores usually offer it.

While it's doubtless sometimes necessary, I'm generally a fan of not having to go into an office for money transfers and so forth. It's also worth remembering that this sort of thing may (normally) be pretty low overhead for a lot of us but isn't for e.g. people who aren't very mobile.

Millions of American citizen will be forced to provide their info to this private company. Authentication involves you providing your cell phone number, then uploading a photograph of your drivers license or passport with that phone and then allowing ID.me to scan your face using the same phone camera.

You may think if the IRS and DMV are using this company it must be a serious identity service vetted by homeland security and what not. I did some digging around.

ID.me has a shopping site where you can shop for deals on sunglasses, sneakers and food kits [1] https://shop.id.me/. They use .me which is the top-level domain for Montenegro.

There is one hackernews thread about this company filled with clearly fake reviews made by accounts created the day the post appeared [2] https://news.ycombinator.com/item?id=13831921

What could go wrong ?

They’ve now used those groups as a stepping stone to verify the public. They want everyone.

Id.me’s Privacy Policy and Terms of Service state that they will not sell your data. Good, but they absolutely can and will sell your demographic cohort. With the buyers being their integration clients (brands) and data brokers.

Hopefully they use differential privacy techniques. Doubtful. It quickly has become a government mandated (irs.gov) Facebook style audience mining network. That’s why Google invested in them and had a seat on their board.

They were damn good to hook wink the IRS and VA on that one.

https://californiaglobe.com/articles/monetizing-data-the-edd...

Consider how you would like the Post Office to verify your identity and then ask why someone else, e.g. the person you're trying to prove your identity to, couldn't do the exact same thing.

One advantage of an ID is that it's a physical token, so they can't just guess your password, they'd need to physically have it. Unless they can forge one, so you'd really want to use some kind of cryptography. You've just reinvented a YubiKey.

The actual problem isn't that we don't know how to solve this. It's that people prefer insecurity to minor inconveniences. Especially when the liability is on someone else.

You also get a digital inbox—Berichtenbox—to organize and centralize all communications from those agencies.

It is difficult to overstate how much life is made better when the government is well-organized and that organization is exposed to you through good UX. I'm now back in the US, it's been 2+ weeks since my renewed passport was supposed to have been mailed to me, and no one at the State Department knows anything.

The obvious reality here is that in the wake of no proper national identification system, social security numbers have been used instead. It's not a question of whether or not we have a national ID, it's really just a question of whether we have a functional one or an inadequate one. Nonetheless politicians would likely be committing suicide with their constituents in some districts if they were to support a push towards a better system.

[0] https://en.wikipedia.org/wiki/Religion_in_the_United_States#....

Historically that was sort of the case. I'd argue today that we mostly rely on state-issued IDs (especially but not necessarily driver's licenses) which are now overlaid with RealID requirements.

As a practical matter it's probably indistinguishable from what a federally-issued ID would be and I'm mostly content with not adding any more layers of identity verification than are really necessary. I'd probably oppose a push for a broadly required federal ID--although I have a passport (and a global entry card).

This doesn't invalidate your point, but man it irritates me how many states have chosen to retain a noncompliant ID tier in order to avoid eating costs or raising fees. At least my state offers a full EDL so there's some added value, but it's absurd that the 'default' local ID isn't adequate for domestic air travel.

For people without a passport, it's extremely easy to have lost a birth certificate at some point over the years. And I honestly have no idea how easy or hard getting a new one issued is from some potentially far away city or town.

That's not why. States like California have dragged their feet for a decade with RealID compliance because they want to keep IDs for people in the US illegally indistinguishable from those for citizens, permanent residents, and others here legally.

Can you elaborate on this for us non-USA people?

The main reason to oppose this is that if you had a low friction government ID system, surveillance capitalism would then require you to present your ID to do anything whatsoever and all privacy would disappear forever.

A state-issued ID generally doesn't work over the internet, which is good. Some of them can be read electronically in person, which is already being abused to a limited extent and should be gotten rid of.

Which is the general response to your concern: "This is already a problem" means we need to go the other way and address that so that doesn't happen anymore, not intensify the problem and set it in concrete so it can never be fixed.

Centralized identity is a design flaw. Your bank needs to know if you're authorized to withdraw from your account, which is why you have a bank card. Your email provider needs to know if you're allowed to access your email account, which is why you have an email password. Your apartment building needs to know if you're authorized to enter, which is why you have an access card. What we don't need, and should not have, is a single primary key binding all of these things together so it can be correlated in a single database.

Since then the UK has imposed ID (technically "proof of right of residence", but that kind of has to be ID) on having a bank account, having a job, and both buying and renting houses. All without having a coherent ID scheme other than passport or driving license.

Privacy and anonymity are not the same; there are many domains where anonymity is reasonable and default, but also many domains where it is not; in those someone can respect privacy and at the same time refuse to deal with anonymous partners, and it's an entirely reasonable choice that they should be able to make not only in theory but in practice - having an effective, secure mechanism for a person to verify their identity to someone else.

Proper identities are a key basis for trust - without them you can do one-off immediate barters (perhaps many times), but prolonged relationships, various forms of credit and "credit-like-effects", accumulation of reputation are highly beneficial for society; and from the perspective of incentives it's worth noting that the harder it is to "get away with" betraying trust and start from zero, the less incentive there is to defect and more incentive to cooperate; there's a good reason why the game theory iterated Prisoner's dilemma (which relies on preserving identities) gets so much better average results for everyone than non-iterated or fully anonymized Prisoner's dilemma.

But I agree - NFC passports are already kinda doing that, but there isn’t enough services that support it.

I think there is a need for authentication, especially among people that are in and out of poverty.

The catch-22 is that you can't get a job without an address, and you can't get an address without a job, so you cannot be authenticated by means available to most people! Hard to bootstrap yourself when you can't prove you exist. Having some kind of authentication that doesn't require an easily lost-or-stolen asset (ID card, birth certificate) would be helpful, as long as it is voluntary!

And that's assuming there is a post office near you (or you have a car), and you're able-bodied enough to get there independently.

I can say from personal experience that I have point blank refused to pick up Signature on Delivery (ie, the sender instructed the postal service not to leave the package on the porch) items from the post office in the past and demanded a refund from the seller. I'd do the same if I was asked to go down there to verify an account for Uber or whatever.

[0] https://auspost.com.au/business/identity/voi-solutions-for-c...

If an online service like eBay, Facebook or Uber required this level of verification, people would (rightly) tell them to piss off and use a competing service instead.

Well, we'll see once the government forces through the "anti-troll" bill that does require a similar level of verification, next year.

[0] https://www.theregister.com/2021/11/29/australia_troll_bill/

But then we also have a notary public system, which is already in the business of verifying identification for official purposes. That could do it too.

Or, you know, it's hard to innovate when you're in organizational crisis mode trying to prefund 50 years of retirement while not being allowed to market-rate your core service...

If the political system stops public sector organisations innovating, they won't innovate. See, for example, BT in the UK, who were looking into investing in fibre optic rollout in the 80s and 90s until Thatcher snuffed that idea out and we're only now starting to get fibre to the premises rolled out in significant numbers.

https://www.techradar.com/uk/news/world-of-tech/how-the-uk-l...

That's because it has been a target of right-wing attack for decades starting with the republican-led 2006 bill that effectively bankrupted it overnight by requiring a massive 50 years of health benefits to be funded.[1]

So when you have a service (not a business) that is constantly being picked apart and hamstrung from completing its most basic functions, you can't possibly blame them for not innovating. Well you can, but it is not in good faith.

https://www.politifact.com/factchecks/2020/apr/15/afl-cio/wi...

Possible in some places!

In many European countries the post office also offers banking services.

But lawmakers in this country are allergic to having the government manage anything

> “You would have to work very hard to come up with a worse idea than having the government become a national bank executed through the post office,” [Sen. Pat Toomey, a Pennsylvania Republican] said. “Even if the U.S. Postal Service was the most competent, professional and best-run organization on the planet, they should not be in the business of banking.

> “We have banks,” Toomey continued. “The idea that the government is going to do a better job is just laughable.”

What a moron.

https://www.oleantimesherald.com/news/gop-senators-oppose-id...

But like other things during the 'Regeanomics era', it was cut, along with forcing the USPS to pay pensions 10 years in advance. The context does help to explain the reason why our USPS Grumman vans are well over their service life, and no where near retirement yet.

This is false, as the factcheck.org reference posted above in this thread makes clear.

Making money while doing something actually useful? Not my government, not when there's a tiny sliver of profit to be funneled to wealthy special interests!

Congress has slowly been fucking the USPS to death at the behest of FedEx, UPS, et al lobbyists.

Seems like a private company providing services to these gov agencies on authentication. Seems like a better solution than showing up at the post office.

I wonder how id.me differs, and how we haven’t centralized on one solution yet

This is such a high barrier to entry, however, that people will simply not do it for something that isn't absolutely critical. Online services compete with each other to be as frictionless as possible, whereas this is the exact opposite of that.