16 ms·
I wonder if the following idea has occurred to anyone else? We have more and more kinds of accounts, financial products, online services, etc. that would benef
by supernova87a 5y ago
I wonder if the following idea has occurred to anyone else?
We have more and more kinds of accounts, financial products, online services, etc. that would benefit from some kind of real in-person verification at points in the process (initial application, maintenance, changes to account) that are imperfectly done with credit checks, questions/answers, logins, etc.
We have Post Offices in nearly every corner of this country. How about turning them into a kind of value-added identity verification service where any company wanting/needing an identity verification could rely on the Post Office to accept someone in person to prove who they are (through fingerprint, document, etc) and be the 3rd party to make this proof easy?
Sure you would need to have normal fraud protections, etc. but I bet the act of having to come to a post office would make things very secure / reliable. And it would give the post office a new function. I heard of this being done in some other countries.
It seems like a way to avoid us all having to pay for fraud so frequently.
- lordnacho 5y agoThere's a number of KYC services where you're basically asked to be filmed and a person in a call centre looks at it and decides whether it's really you. When I went looking at them they were boasting with using AI, and then in the meeting it turned out it was mostly farmed out to someone in India.
- ribosometronome 5y agoYou misread. They're using Al, he's in Chennai and on call 24/7.
- Tenoke 5y ago>We have Post Offices in nearly every corner of this country. How about turning them into a kind of value-added identity verification When I opened a bank account (n26) in Germany this is how they verified my identity (along with a brief video call) as a foreigner so the idea has merit.
- froh 5y agoIt's called PostIdent, it'd a wonderful service.
- dudus 5y agoGoing through some processes on DMV and USCIS recently I noticed both of them were using Id.me Seems like a private company providing services to these gov agencies on authentication. Seems like a better solution than showing up at the post office.
- noahtallen 5y agoThat’s actually fascinating, because this official login solution exists, and it seems very nice: login.gov. It’s from the GSA which seems to be doing some good work. I wonder how id.me differs, and how we haven’t centralized on one solution yet
- toomuchtodo 5y agoOver 200 federal agency web properties have adopted login.gov. Social Security Administration recently adopted them as their primary identity provider (and appears to be phasing out id.me but I’m waiting on some ground truth to confirm that). Something is up with IRS as to why they went with with id.me, and someone has submitted FOIA requests to get more context.
- paxys 5y agologin.gov is simply a user login mechanism. id.me does identity verification in many different ways.
- throwaway-xyz89 5y agoLogin.gov also supports identity verification: https://login.gov/help/verify-your-identity/how-to-verify-your-identity/ https://login.gov/help/verify-your-identity/how-to-verify-yo...
- selimthegrim 5y agoYou record video message for example and state unemployment office can verify it against DL photo
- mindslight 5y agoThere are already standard ways of doing brick and mortar identity verification, and in somewhat surveillance-resisting ways even! The most common is "notarization" - a state-deputized "notary" verifies that you are who you say you are, and then endorses your signed document with a special stamp and a signature. Another common one used for financial transactions is a "medallion stamp", wherein not only do they verify your identity, but the institution doing the medallion stamp also takes on the risk for a fraudulent transaction. Both are generally available for free by being a customer of your local small bank or credit union. These could be easily adopted by web companies for password resets, account withdrawals above self-set limits, etc.
- supernova87a 5y agoYes, but notarization feels like a much more cumbersome process, designed for more like "once in a lifetime" transactions (house purchase, will, etc). It also feels more like a proof, only needed if a transaction is disputed in court etc, it can be investigated back to the source. I mean the every day kind of verification that fuels our daily transactions and benefits from instantaneous info being transmitted back and forth, to easily get a credit card approved for example.
- mindslight 5y agoThe cumbersome part of notarization is having to physically go to the bank, which would be the same for the post office. The performance of showing up in person, and showing a physical hard-to-forge ID, is exactly what drastically raises the bar for an attacker. Doing this instantaneously implies skipping the heavyweight process. Which I assume means doing something like a one time (or periodic) cumbersome in-person process, and then repeating a quicker online process. Any private company could create such a system right now, bootstrapping off the notarization framework to do the heavy lifting. But credit cards and other traditional financial institutions don't actually care about identity in such a strong sense. The standard process for setting up online access for a new account at a brick and mortar bank involves leaving the bank, going to their website from home, and entering your not-particularly-private information to sign up. That could be easily modified to setting up initial access credentials right in the bank if they wanted to, but the traditional financial system is pretty forgiving for the most part. So we're really talking about custodians of new bearer instruments (eg cryptocurrency), which are more like cash. Hence my reference to these new holding companies being the ones that should be integrating notarization into their exceptional account access methods. Of course they could also just insist on the use of real security tokens, require a second one for backup purposes, and simply not use SMS at all. FWIW another more convenient way of doing brick and mortar verification is to snail mail out a letter with a code on it to the address of record. It obviously doesn't have super security properties (anyone can steal mail), but it's much better than electronic-only non-verification and much nicer than surveillance database verification.
- magmastonealex 5y agoCanada Post, the equivalent of the USPS in Canada, offers exactly this service [1] I've used it for Know-Your-Client type stuff with banks, but it is theoretically open to most if not all businesses. Every time I've needed to interact with it, it's been a straightforward process as a consumer. [1]: https://www.canadapost-postescanada.ca/cpc/en/business/postal-services/digital-proof-identity.page https://www.canadapost-postescanada.ca/cpc/en/business/posta...
- jptech 5y agoSagawa (a private courier in Japan) provides a similar service but at your doorstep. Basically the sender registers your info with them (mainly DoB) and upon delivery you have to provide an ID, which the driver checks that it matches with what's written on the envelope, then enters your DoB and other info and your ID number into a portable wireless POS device. Only if they match, you receive the package, and then I believe the info entered into the device gets relayed to the sender. (Use your translation service of choice if desired.) https://www.sagawa-exp.co.jp/service/kakunin/ https://www.sagawa-exp.co.jp/service/kakunin/
- donmcronald 5y agoIt would be amazing to see the current trust / code-signing industry fail and for something that integrates services like the one you linked to replace them. I've always thought that a code-signing certificate tied to a natural person should be more valuable than one tied to a faceless corporation, but the industry is (poorly) built around selling high priced certificates to anyone with enough money to start a business. Imagine being able to get a code signing certificate in a single afternoon by signing up, taking your ID to Canada Post, and downloading your certificate after the identity verification is submitted. That would be quite the difference from the current awful experience where someone in a foreign country guesses and makes judgement calls based on the documentation you snail mail to them.
- xxpor 5y agoOr we could just have a modern ID card that already has a cert embedded in it, and skip the whole go to the post office step. Most big companies and the US Federal government have already figured this out for their own employees. Keep the post office option for the folks that don't have an ID, but for most people, this would be the most straightforward option.
- fnord77 5y agothe USPS could be doing this and so much more for citizens. But lawmakers in this country are allergic to having the government manage anything
- nerdponx 5y agoMeanwhile the USPS instead funds itself by being an open channel for wasteful junk mail. Making money while doing something actually useful? Not my government, not when there's a tiny sliver of profit to be funneled to wealthy special interests!
- MisterTea 5y ago> But lawmakers in this country are allergic to having the government manage anything Congress has slowly been fucking the USPS to death at the behest of FedEx, UPS, et al lobbyists.
- tantalor 5y agoHere's my Senator on the subject of postal banking: > “You would have to work very hard to come up with a worse idea than having the government become a national bank executed through the post office,” [Sen. Pat Toomey, a Pennsylvania Republican] said. “Even if the U.S. Postal Service was the most competent, professional and best-run organization on the planet, they should not be in the business of banking. > “We have banks,” Toomey continued. “The idea that the government is going to do a better job is just laughable.” What a moron. https://www.oleantimesherald.com/news/gop-senators-oppose-idea-of-post-office-banking-services/article_c508cba8-3297-5195-8325-57da550a665a.html https://www.oleantimesherald.com/news/gop-senators-oppose-id...
- throwaway946513 5y agoWhat's even funnier is that we actually used to have Postal Banking back in the 20th century. But like other things during the 'Regeanomics era', it was cut, along with forcing the USPS to pay pensions 10 years in advance. The context does help to explain the reason why our USPS Grumman vans are well over their service life, and no where near retirement yet.
- ErikVandeWater 5y agoI'm all for it if they execute it well enough to make a profit.
- pjc50 5y agocough national id scheme, anyone? Thinking of E-Estonia here.
- chrisin2d 5y agoI lived in the Netherlands and admired how they offer a SSO service called DigiD for most—if not all—national and municipal services: personal tax, business tax, healthcare, pension, water, garbage, police and many other service portals. Yes, there is a nice online police portal where you can digitally file a police report, get a declaration for insurance, and ask questions. You also get a digital inbox—Berichtenbox—to organize and centralize all communications from those agencies. It is difficult to overstate how much life is made better when the government is well-organized and that organization is exposed to you through good UX. I'm now back in the US, it's been 2+ weeks since my renewed passport was supposed to have been mailed to me, and no one at the State Department knows anything.
- dzhiurgis 5y agoNot having to depend on phone numbers would be so good, especially for citizen mobility.
- jjcm 5y agoIt's long, long overdue. That said a national ID scheme has long been opposed by a vocal part of the Christian population in the states. It's association with the new testament's prophesy of the mark of the beast prevents many lawmakers from pushing forward a proposal, especially since 65% of Americans in 2019 identified as having a belief in some variety of Christianity[0]. The obvious reality here is that in the wake of no proper national identification system, social security numbers have been used instead. It's not a question of whether or not we have a national ID, it's really just a question of whether we have a functional one or an inadequate one. Nonetheless politicians would likely be committing suicide with their constituents in some districts if they were to support a push towards a better system. [0] https://en.wikipedia.org/wiki/Religion_in_the_United_States#:~:text=The%20United%20States%20has%20been,26%25%20of%20the%20total%20population https://en.wikipedia.org/wiki/Religion_in_the_United_States#....
- ghaff 5y agoI'd just observe that we saw the opposite happening with COVID. Based on a couple experiences of my own I was chatting with a friend who runs gift-giving strategy for a major university. I made the comment that a lot of things that just had to be done in person with notaries etc. suddenly apparently didn't have to be any longer and she agreed. While it's doubtless sometimes necessary, I'm generally a fan of not having to go into an office for money transfers and so forth. It's also worth remembering that this sort of thing may (normally) be pretty low overhead for a lot of us but isn't for e.g. people who aren't very mobile.
- ews 5y agoI thought about this too. My iteration of the idea is to have the USPS office to install a cert on a citizen's phone (upon verification in person) and make sure a cert is associated with one person only. This will allow easy and reliable online voting.
- schappim 5y agoIt is a good idea, that is why Australia Post have done just this: https://auspost.com.au/business/identity/voi-solutions-for-conveyancing-practitioners-and-mortgagees https://auspost.com.au/business/identity/voi-solutions-for-c...
- deleted 5y ago[deleted]
- Grimburger 5y agoLast I looked many years ago it was quite an expensive service. Good for high-value one-off things but not really what GP is talking about.
- paxys 5y agoWhat you describe does exist, but not via the post office. For example when I started a new job I had to go to a tiny store that does fax, copy, postal, notary and similar services and have them physically verify my employment eligibility documents. Several similar providers exist all over the city (including FedEx, UPS, banks and more). This is such a high barrier to entry, however, that people will simply not do it for something that isn't absolutely critical. Online services compete with each other to be as frictionless as possible, whereas this is the exact opposite of that.
- bckygldstn 5y agoNew Zealand Post does this: https://www.realme.govt.nz/ https://www.realme.govt.nz/
- stopglobalism 5y agoSounds like a Notary service. "What is the meaning of notary service? A notary is a publicly commissioned official who serves as an impartial witness to the signing of a legal document. Document signings where the services of a notary are likely include real estate deeds, affidavits, wills, trusts, and powers of attorney. The main reason a notary is used is to deter fraud."
- xur17 5y agoTaking this a step further, I'd love for them to be able to issue some sort of smart card that I could then utilize when signing up for other accounts that still wanted verification, but were okay with a slightly lower assurance.
- MichaelBurge 5y agoThe term you're looking for is "Notary". There are plenty of them around, and they're required to execute high-dollar contracts like buying a house or wills. Every state has its own requirements to become a notary(with one requirement being posting a $10k bond or purchasing insurance, so you have something to lose if you make an egregious mistake). You can require counterparties notarize any documents you'd like, and reject anyone who declines. And you can do this without needing to change the law to increase the scope of responsibility of the USPS. It's illegal for the USPS to offer notary services, although they're often located near notaries: UPS Stores usually offer it.
- lph 5y agoIt's a good idea. The flaw is in thinking USPS is even slightly interested in innovating. They're not. But then we also have a notary public system, which is already in the business of verifying identification for official purposes. That could do it too.
- OrsonSmelles 5y ago>thinking USPS is even slightly interested in innovating Or, you know, it's hard to innovate when you're in organizational crisis mode trying to prefund 50 years of retirement while not being allowed to market-rate your core service...
- lawtalkinghuman 5y ago> The flaw is in thinking USPS is even slightly interested in innovating. They're not. If the political system stops public sector organisations innovating, they won't innovate. See, for example, BT in the UK, who were looking into investing in fibre optic rollout in the 80s and 90s until Thatcher snuffed that idea out and we're only now starting to get fibre to the premises rolled out in significant numbers. https://www.techradar.com/uk/news/world-of-tech/how-the-uk-lost-the-broadband-race-in-1990-1224784 https://www.techradar.com/uk/news/world-of-tech/how-the-uk-l...
- SavantIdiot 5y ago> It's a good idea. The flaw is in thinking USPS is even slightly interested in innovating. They're not. That's because it has been a target of right-wing attack for decades starting with the republican-led 2006 bill that effectively bankrupted it overnight by requiring a massive 50 years of health benefits to be funded.[1] So when you have a service (not a business) that is constantly being picked apart and hamstrung from completing its most basic functions, you can't possibly blame them for not innovating. Well you can, but it is not in good faith. https://www.politifact.com/factchecks/2020/apr/15/afl-cio/widespread-facebook-post-blames-2006-law-us-postal/ https://www.politifact.com/factchecks/2020/apr/15/afl-cio/wi...
- masonic 5y ago
- AussieWog93 5y agoI don't know about other countries, but here in Australia post offices are open Monday-Friday, 9-5 (with the exception of some smaller ones being open until noon on a Saturday) and there are massive queues around lunchtime. And that's assuming there is a post office near you (or you have a car), and you're able-bodied enough to get there independently. I can say from personal experience that I have point blank refused to pick up Signature on Delivery (ie, the sender instructed the postal service not to leave the package on the porch) items from the post office in the past and demanded a refund from the seller. I'd do the same if I was asked to go down there to verify an account for Uber or whatever.
- shakna 5y agoYou may not like AusPost, but, the actually do offer the suggested service. [0] (As well as being somewhere you can apply for Police Checks and other identity services.) [0] https://auspost.com.au/business/identity/voi-solutions-for-conveyancing-practitioners-and-mortgagees https://auspost.com.au/business/identity/voi-solutions-for-c...
- AussieWog93 5y agoI mean sure, you can, but it's ridiculously inconvenient. If an online service like eBay, Facebook or Uber required this level of verification, people would (rightly) tell them to piss off and use a competing service instead.
- shakna 5y ago> If an online service like eBay, Facebook or Uber required this level of verification, people would (rightly) tell them to piss off and use a competing service instead. Well, we'll see once the government forces through the "anti-troll" bill that does require a similar level of verification, next year. [0] https://www.theregister.com/2021/11/29/australia_troll_bill/ https://www.theregister.com/2021/11/29/australia_troll_bill/
- 5y ago
- totetsu 5y agoI was going to say that this was done in New Zealand, but either the post office stopped doing it or I miss remembered. https://www.realme.govt.nz/how-apply/ https://www.realme.govt.nz/how-apply/ now it seems that the Drivers license centers are the only place to get photo verified.
- bootwoot 5y agoAren't you describing a notary public? A person registered with the government who asserts with their stamp that documentation and IDs are verifiable in person?
- SavantIdiot 5y agoThat's part of the reason why I like having my money with an RIA that I have a relationship with: I can't make big withdrawals on the account without verifying with several people. That's a sigh of relief. I think there is a need for authentication, especially among people that are in and out of poverty. The catch-22 is that you can't get a job without an address, and you can't get an address without a job, so you cannot be authenticated by means available to most people! Hard to bootstrap yourself when you can't prove you exist. Having some kind of authentication that doesn't require an easily lost-or-stolen asset (ID card, birth certificate) would be helpful, as long as it is voluntary!
- sokoloff 5y agoMany people have addresses without having a job. Kids, stay-at-home partners, roommates, college students, retirees, and likely others.
- SavantIdiot 5y agoI'm talking about homeless people: You can't have an address if you don't have a job because you can't pay rent. Unless you live in a city with adequate public housing. Duh.
- GoblinSlayer 5y agoIn some regions, particularly in Africa, there is no door to door delivery of mail; for example, in Kenya. Renting a PO box has traditionally been the only way to receive mail in such countries. Another use case is when the mail box at your doorstep is not very secure, you rent a po box in the post office and mail is delivered to that po box instead of your address.
- AnthonyMouse 5y ago> How about turning them into a kind of value-added identity verification service where any company wanting/needing an identity verification could rely on the Post Office to accept someone in person to prove who they are (through fingerprint, document, etc) and be the 3rd party to make this proof easy? Consider how you would like the Post Office to verify your identity and then ask why someone else, e.g. the person you're trying to prove your identity to, couldn't do the exact same thing. One advantage of an ID is that it's a physical token, so they can't just guess your password, they'd need to physically have it. Unless they can forge one, so you'd really want to use some kind of cryptography. You've just reinvented a YubiKey. The actual problem isn't that we don't know how to solve this. It's that people prefer insecurity to minor inconveniences. Especially when the liability is on someone else.
- woodruffw 5y agoWe could even cut out the middle man and allow the USPS to offer banking services, the way it did for nearly 50 years[1]! The original implementation didn't include checking or savings accounts, but it looks like they're slowly looking into that[2]. [1]: https://en.wikipedia.org/wiki/United_States_Postal_Savings_System https://en.wikipedia.org/wiki/United_States_Postal_Savings_S... [2]: https://federalnewsnetwork.com/agency-oversight/2021/10/usps-pilot-expands-postal-banking-services-after-years-of-skepticism/ https://federalnewsnetwork.com/agency-oversight/2021/10/usps...
- sleepy_keita 5y agoJapan Post provides this service, except the postman goes to your door and asks for ID and verifies it on the spot. It's very easy, and an extremely cheap way for services to verify identities (it's just +100JPY on the regular postal fare)
- tdeck 5y agoThis seems like like it would only work in a country like Japan where the mail carrier would be on time. What if you're not home when they arrive? In the US they'd give you a 4 hour window and then show up 2 hours after the end of it.
- GoblinSlayer 5y agoThey leave a notice that you received a verified letter, then you go the post office.
- estaseuropano 5y agohttps://old.reddit.com/r/tifu/comments/muc3ze/tifu_by_accidentally_getting_married_at_the_ups/ https://old.reddit.com/r/tifu/comments/muc3ze/tifu_by_accide... Possible in some places! In many European countries the post office also offers banking services.
- C19is20 5y agoItaly: spid. In person id verification at any post office, use the app thereafter.
- AareyBaba 5y agoUnfortunately, the U.S. gov has gone in the direction of using a shady private company ID.me [0] to provide this service. Starting 2022, the IRS is using ID.me to authenticate login to the irs.gov website. Same with California DMV. [0] https://en.wikipedia.org/wiki/ID.me https://en.wikipedia.org/wiki/ID.me. Millions of American citizen will be forced to provide their info to this private company. Authentication involves you providing your cell phone number, then uploading a photograph of your drivers license or passport with that phone and then allowing ID.me to scan your face using the same phone camera. You may think if the IRS and DMV are using this company it must be a serious identity service vetted by homeland security and what not. I did some digging around. ID.me has a shopping site where you can shop for deals on sunglasses, sneakers and food kits [1] https://shop.id.me/ https://shop.id.me/. They use .me which is the top-level domain for Montenegro. There is one hackernews thread about this company filled with clearly fake reviews made by accounts created the day the post appeared [2] https://news.ycombinator.com/item?id=13831921 https://news.ycombinator.com/item?id=13831921 What could go wrong ?
- parkerhiggins 5y agoIt’s worse than that. Id.me originally started by providing verification for group discounts. Fair enough needs to verify to provide a discount and facilitate commerce. They’ve now used those groups as a stepping stone to verify the public. They want everyone. Id.me’s Privacy Policy and Terms of Service state that they will not sell your data. Good, but they absolutely can and will sell your demographic cohort. With the buyers being their integration clients (brands) and data brokers. Hopefully they use differential privacy techniques. Doubtful. It quickly has become a government mandated (irs.gov) Facebook style audience mining network. That’s why Google invested in them and had a seat on their board. They were damn good to hook wink the IRS and VA on that one. https://californiaglobe.com/articles/monetizing-data-the-edd-id-me-and-the-unemployed-of-california/ https://californiaglobe.com/articles/monetizing-data-the-edd...
- deleted 5y ago[deleted]
- erispoe 5y agoAll European online banks can verify your identity with a video call in 5min. They check your info, your ID documents, that you are indeed the one holding these documents, and the security features of these documents.