[xxpor]

Or we could just have a modern ID card that already has a cert embedded in it, and skip the whole go to the post office step. Most big companies and the US Federal government have already figured this out for their own employees.

Keep the post office option for the folks that don't have an ID, but for most people, this would be the most straightforward option.

[noodlesUK]

This does work for certain things, but for some things you don’t just want proof of possession of a particular person’s ID card, you want to see that a particular person matches the document they are presenting in addition to verifying that the doc is real.

[xxpor]

I'd have to imagine that's exceptionally rare though. It would be semi-solved with a second factor to unlock the card.