It's yet to be seen how this new version will work, however they say in the story it's an upgrade of mygovid. Mygovid as it stands is a cluster. It insists yo

It's yet to be seen how this new version will work, however they say in the story it's an upgrade of mygovid. Mygovid as it stands is a cluster. It insists you have a single email address as your one true name, if insists you use that one true name everywhere you use mygovid to authenticate, if you upgrade your phone it throws away the ID. It's unreliable, as in the app have race conditions with it's internal state and external requests to identify yourself. Those race conditions cause it to not identify you at all, not notify you there is ID request and various other indeterminate states. As a cherry on the top, mygovid is used in to authenticate against my.gov.au (the closeness of the two names is so confusing they have to put big red warnings not to confuse the two), and my.gov.au has been the victim or rampant identity fraud to the tune of $0.5B. As others have mentioned here, there were far better thought out identity schemes around when mygovid was introduced. They chose to roll their own instead. I hope this is an improvement, but there are few grounds for hope. The bill moving this forward is based on what the government needs - so although they allow for many ID providers the bill repeatedly mentions just one, I presume they want one true name and a centralised data store. Amusingly at first glance the bill looks devoid of technical details and I'm guessing that's because the lawyers think they left the design wide open so the subject matter experts can implement something that works. In reality and probably unwittingly, they've already set the technical foundations in stone, and they've chosen the wrong ones. Nonetheless if it defrauded like the present system has been, they'll blame the implementers.