I could see the IRS having a secure messaging system specific to the IRS. Each state should probably also have a secure messaging system. I don't check snail

I could see the IRS having a secure messaging system specific to the IRS. Each state should probably also have a secure messaging system. I don't check snail mail. Such a system should only be used for government official communications however and must use MFA and have a way for citizens to regain control of their accounts easily and quickly. I would never use such a system for unofficial government communications however. I've interacted with many government offices and very few of them set up their DNS, SSL certificates and servers properly. It seems like just the other day I had to explain to the DMV that RFC1918 addresses must not be in their MX records. They argued with me. And you don't even want to know which agencies can't install their SSL certificates correctly. Not saying names, they do not handle embarrassment very well.