
Login.gov - mooreds
https://login.gov/
======
jlgaddis
I'm a little confused. First, they say:

> _login.gov implements the latest National Institute of Standards and
> Technology (NIST) standards for secure authentication and verification._

Then:

> _Two factor authentication requires that you login with your password and a
> code that we send to your phone._

I assume they're referring to SMS (I see references to Twilio)... but didn't
NIST just recently say that SMS wasn't acceptable for 2FA?

Quite pleased to read this, though:

> _We welcome external review of our privacy-protection measures. All of our
> code is available for public inspection in an open-source repository._

\-- [https://login.gov/security/](https://login.gov/security/)

~~~
Eridrus
SMS isn't great for security, but it's better than nothing and it scales well.

------
tradersam
Woah! Cool idea. Never thought we'd get something so 2010 from the U.S.
government so early.

~~~
yellowapple
To be fair, 2010 technology in use by the U.S. government in 2017 is actually
pretty impressive. The expectation is usually 2000 technology in use by 2017
(and that's, like, bleeding-edge).

~~~
tradersam
> To be fair, 2010 technology in use by the U.S. government in 2017 is
> actually pretty impressive.

That was the joke. :)

------
mooreds
Here's the blog post announcing the effort if you want to see behind the
scenes: [https://18f.gsa.gov/2017/08/22/government-launches-login-
gov...](https://18f.gsa.gov/2017/08/22/government-launches-login-gov/)

------
pzone
I like it. Very happy to see the US Government's digitization efforts
continue. At least we can can see SOME aspects of our government improving.

------
trengrj
Australia has MyGov and I have to say it works really well
[https://my.gov.au](https://my.gov.au).

Linking accounts is fairly painless and I assume it also functions as a pseudo
MDM (Master Data Management) tool in that Government departments have a unique
key to link people across different services.

------
kennydude
It sounds like a much simpler idea than GOV.UK Verify although the integration
(SAML) seems quite similar.

Shame a lot of the SAML integration libraries don't seem that great

------
cbanek
I'd like to bid on the United Nations login system.

~~~
DKnoll
I don't believe there is any one unified system for end users (obviously they
have no citizens, only employees/agents/representatives), just AD for each
council/mission/etc.

But I do believe you're joking and I'm a pedant.

