konklone · HackerTrans

4 jaar geledendiscuss

The document distinguishes between enterprise-facing and public-facing systems. For enterprise-facing (government employees, contractors, etc.), it's talking about discontinuing use of TOTP. For public-facing systems, it doesn't impose any restrictions, since (as you're saying) the general public really needs options.

konklone

4 jaar geledendiscuss

Login.gov does support identity verification. Not all uses of Login.gov require it, so many accounts are just used for email with MFA.

konklone

13 jaar geledendiscuss

And there are some exceptions! The CFPB, in particular, has a number of extremely talented young people doing awesome work and in-house development for them -- and they open source a great deal of work: https://github.com/cfpb

konklone

13 jaar geledendiscuss

There are lots of non-US examples here: http://government.github.com/community/

comments