3 ms·
> I tried to help set a relative up a while back to receive his payments, which required authenticating with ID.me. Isn't it weird for the US to rely on public
by donmcronald 4y ago
> I tried to help set a relative up a while back to receive his payments, which required authenticating with ID.me.
Isn't it weird for the US to rely on public services that are managed on the TLD (.me) of a foreign country?
I see the same stupidity with my own country's government where they use independent domain names for every service rather than a single, high value namespace (ex: gov.TLD). I guess I should just be happy they use our country's TLD. Lol.
- paulryanrogers 4y agoHard agree. Even if they contract it out, it should at least live on CNAME under official gov TLD(s).
- mulmen 4y agoIt really does raise the question what other obvious (or not-so-obvious!) risks they ignored. How is "a foreign country can perform a DOS by using the DNS system as intended" not an obvious problem? Imagine if the service was called who.ru. What could possibly go wrong?
- interestica 4y agoThe TLD is one of the only ways that's quick to teach as a way to verify a domain. It's absurd to use another country's -- especially as I've seen first hand how the actual operation can just be handled by a small and easily-infiltrated group (as sometimes the TLD is initially handled by a university group). It was always funny seeing news about the instability of government in Libya and then also see a bunch of projects come out using the TLD (.ly)