konklone · HackerTrans

The document distinguishes between enterprise-facing and public-facing systems. For enterprise-facing (government employees, contractors, etc.), it's talking about discontinuing use of TOTP. For public-facing systems, it doesn't impose any restrictions, since (as you're saying) the general public really needs options.

konklone

há 4 anosdiscuss

Login.gov does support identity verification. Not all uses of Login.gov require it, so many accounts are just used for email with MFA.

konklone

há 13 anosdiscuss

And there are some exceptions! The CFPB, in particular, has a number of extremely talented young people doing awesome work and in-house development for them -- and they open source a great deal of work: https://github.com/cfpb

konklone

há 13 anosdiscuss

There are lots of non-US examples here: http://government.github.com/community/

comments