Hacker News new | ask | show | jobs
by thephyber 717 days ago
Oh. In Single-Sign On / OAuth terminology, the bank’s website is the Identity Provider (IdP).

Banks in the US depend on government-issued ID and information contracted from credit bureaus (3 big companies that are effectively data brokers about consumer lending behavior). We have federated identity, but in a weird, ineffective way.

Every once in a while, someone bold makes a political proposal to make our authentication / identity proof systems simpler, but then people realize the privacy implications (and religious fundamentalists point to the “mark of the beast” part of the Bible) and then the proposal doesn’t go anywhere.

1 comments

The interesting part about this is that such a system wouldn't necessarily need to come from the government. There are companies that need verification and want to do it cheaply and with little friction, and there are banks and carriers who could make some extra money on it.
There are thousands of banks in the US. Getting them to agree on anything is beyond difficult.

Carriers in the US don't all require ID, so they're not particularly useful for identity verification.