Re:The "email is authentication" pattern
by joncfoo on Saturday September 07, 2024 @06:27PM
(#41476842)
Unfortunately login.gov is only available for use by companies doing business with the US government.
Re:The "email is authentication" pattern
by capitainenemo on Saturday September 07, 2024 @06:40PM
(#41476898)
Also login.gov isn't a government issued digital ID. It's just a centralised authentication platform for government use, much like using google or apple for authentication.
It supports the usual options for multifactor (TOTP, text, yubikey/other hardware auth/PIV cards) but for most users it probably ends up being SMS. At best TOTP.
It has it's pros and cons, maybe more pros if you factor in that the biggest issue isn't authentication really, it's the fact that all of these private companies accrue everyone's sensitive info, which can be abused by any actor, private or public. If data were kept on the client side, and synced to other machines through P2P like WebRTC, then maybe this wouldn't be such a big deal.