However I live in perpetual fear that at any moment some corrupt minister will do a deal with Microsoft and the Devil. Out will go plain HTML and common interoperable standards, simple authentication, and in will come a vipers nest of javascript calling home to monstrous tracking infrastructure, AWS containers, Cloudflare MITM, hooked into some hideous TPM module and mandatory smartphone camera garbage that scans my iris....
Somehow there is a stronghold of common sense and decency standing its ground within our government. I almost wish I could pay a little extra tax to fund them.
(I worked at GDS until two years ago.)
This is my only gripe. Every time I do self assessment or complete my tax returns as a contractor I had to find some arcane combination of government gateway ID, password, authentication app etc etc. It's so secure it stops you paying the government money.
The service that takes that crown in my experience is tarantopermits.com, a parking permit management system that fills me with rage just thinking about it.
There must be a massive cost-saving opportunity here.
I mean, a nominal fee enough to correlate car registration with owners address, but not £210 like google told me it costs in Wandsworth. I bet about £10 of that goes to the council.
"Welcome to tarantopermits.com"
"This domain name is parked for FREE by fasthosts.co.uk"
Yes, definitely.
I've called UX designers out a couple times on the aesthetical complexity of their designs: if you award GOV.UK's quality a prize [0], why don't you mimic them instead of Google?
[0] https://www.gov.uk/government/news/govuk-wins-design-of-the-...
More generally for federal and state/local government opportunities to use your technology expertise to make a difference, these folks are excellent: https://techtalentproject.org/tech-talent/
It's middle of the tree at best. I'm sure you can find people for whom it's well paying, but the recruiters from UK gov departments that regularly contact me keep trying to sell me on the benefits of jobs where the upper salary band is less than half of what I earn.
Thankfully I've noticed more sites copying gov.uk, very few but still positive.
Meanwhile, at least in some EU countries, you can authenticate using your identity card and USB smartcard reader.
The GOV.uk team loves moving things forward and leaving an awful lot of guff behind.
I'll start why this really matters from the last item. Even after my move I kept my UK company for a while, I was making regular electronic VAT submissions until sometime in July 2021 I decided to deregister my company's VAT. I did that via HMRC's online form. In December I logged in to check to find out that any record of me doing that evaporated, and now I had an "estimated" VAT bill of around £5k. I submitted a zero return for the previous quarter I should've been deregister in and after I rang HMRC and 2 weeks later the balance "I owed" dropped to zero. I deregistered again and this time "it worked". However, I had no way whatsoever to prove I indeed deregistered before. The person I spoke to on the phone that day decided my story believable so I didn't get any fines. What if they had a worse day? Ability to reliably prove you submitted government documents when you say you did is extremely important. In the country I now live in(Poland) you get a cryptographically signed XML document you can use as proof. You get one from any level of government you submit stuff to online (taxes, local councils anything). There is an online service you can check the validity of such signature and the content is all readable with a text editor.
Then a way to electronically sign documents that is equivalent to your in person signature legally without any special equipment or software for free. And a way to authenticate oneself to government services(including national healthcare) Here any citizen (or a foreigner that registers) can do so with one "thing". There are few ways to authenticate, an app, an online bank account (all banks in the country support it), a national id with a nfc chip and a pin, or you go to a local council in person and they create an account for you with a usename/password +2FA(sms,or auth app). You can sign any document using an online service, there is a history of stuff you signed you can check and you have a "mailbox" you can use to receive documents instead of the post.
The system is mostly XML based and it uses ssl for signatures. I have no idea what they use in the backend (probably lots of java). One can also purchase certificates to use as a signature like in other EU countries. The government sites look reasonably modern with dynamic forms, but they deteriorate gracefully if all you want is to read them, but good luck getting forms to work without JS.
Personally I think they did a pretty good job with this system.
From what I saw, their legal and bureaucratic systems are geared to try to authenticate everything via physical means, be it signatures (that are supposed to be unique and not just an expression of intent), wet stamps, or (recently) digital signatures. On the contrary, UK works on trust and its legal systems, so you can (theoretically) sign a large money contract with a cross on a napkin, you can open a bank account with a letter from a "a person of good standing in their community" without ever holding a government issued ID, and you can sign contracts with a simple checkbox.
I really enjoy the latter. It's a bit messier, but also feels more humane.
love u gov.uk.
[1] https://design-system.service.gov.uk/design-system-team/
Edit: Apparently there are a lot! Really nice to see.
See https://www.systeme-de-design.gouv.fr/ and https://github.com/GouvernementFR/dsfr
It's great that it's publicly available, like many other public stuff the French Government is doing like https://beta.gouv.fr/ or the tax calculators, but it's still funny.
There is:
Argentina - https://argob.github.io/poncho/
Australia - https://gold.designsystemau.org/
Canada - https://design.gccollab.ca/
Czech Republic - https://designsystem.gov.cz/#/
Estonia - https://brand.estonia.ee/?lang=en
Flanders - https://www.vlaanderen.be/digitaal-vlaanderen/onze-oplossing...
France - https://www.systeme-de-design.gouv.fr/
Germany - https://styleguide.bundesregierung.de/sg-de/
Greece - https://guide.services.gov.gr/
Italy - https://developers.italia.it/en/designers/
Netherlands - https://www.digitaleoverheid.nl/achtergrondartikelen/het-nl-...
New Zealand - https://www.digital.govt.nz/standards-and-guidance/design-an...
Singapore - https://www.designsystem.tech.gov.sg/
Switserland - https://swiss.github.io/styleguide/en/
United States - https://designsystem.digital.gov/
Ukraine - https://diia-en.fedoriv.com/
It went from DIY open source to something more like the UK's model; in fact Canada is running with a number of UK-origin projects & ideas, like Notify, which is of course a good thing, we should all learn from each other's best practices and innovations.
Two of my favourites:
Holiday API I plug into every ecommerce site I work on:
https://www.api.gov.uk/gds/bank-holidays/#bank-holidays
Domain Email Security checker:
https://emailsecuritycheck.service.ncsc.gov.uk/check
Please share any other favourites!
https://developer-portal.driver-vehicle-licensing.api.gov.uk...
For the DVLA the site isn't so bad, but I definitely get that slightly disconcerted feeling that something is going to go wrong while you're filling out this important, official form? Which I don't get at all in the new framework.
Those would be the people commonly refered to as incompetent traitorous woke lefty cultural marxists refusing to do the will of the people by the fair and balanced media.
Maybe it's not dead :)
Progressive enhancement is nice, and user friendly, and better UX overall. But when you get started with modern frontend stacks nowadays it's out of the question. Whereas, I and others like me, that use a classical backend framework that spits out HTML might do a better job (but not always, due to time and budget).
I used to design sites like this explicitly in the mid-00s. I would explicitly test with no js and no CSS. I still aim to do it to this day, but it's hard to get others to do it when most web devs are happy to throw shit at a wall and see what sticks.
Docker images: https://github.com/notpushkin?tab=packages&tab=packages&q=go...
Simple stub for the signon service (likely needs further modification): https://gitlab.com/notpushkin/stupidauth/container_registry
And the Docker Compose stack: https://gist.github.com/notpushkin/f174b52efc6285e6be30fb66b... (works with https://lunni.dev/ or Docker Swarm + Traefik)
If you do manage to run it please ping me, I'm also interested in trying it out!
—
Edit: discusson on GitHub: https://github.com/alphagov/forms/discussions/106
No frills or silly scroll jacking animations plus javascript hogging contraptions that we see in almost all websites these days.
This gives me hope.
Still the cookie warnings though :-( I've just visited on my phone the forms page linked in the title, and the first thing that greeted me was a full-screen page-blocking dialog with some cookie nonsense. You can't interact with the contents of the page until you decide how you feel about cookies.
E.g. if you search ‘DVLA vehicle information’, you will land on this page https://www.gov.uk/get-vehicle-information-from-dvla and you have to click ‘Start Now’ to get the page you actually wanted. The same is for logging in to HMRC Personal Tax
I’d like the actual form I want on the same page
I think ultimately, it works quite well.
If the form took 10 seconds to load after clicking 'start now', I'd be more frustrated.
But it’s still inconsistent with all other government services.
Something that fascinated me: how they were planning the departure of GDS leadership years in advance. GDS had to push changes through, which means making enemies, which means eventually being squeezed out. So they just assumed that will happen and adjusted organisational structures, making sure there will be new leaders in place. Just incredible level of professionalism.
[1]: https://www.amazon.co.uk/Digital-Transformation-Scale-Strate...
I'm very interested how they build a UI for branching. Communicating branching conditions visually and clearly without just handing the user a programming language is a hard problem.
The passport application form[1], for instance, is smooth and well-designed, and the questions are well-written - a good example of the Government Digital Service's excellent design and solid implementation. Perhaps the only downside is the rather disconcerting photograph evaluation tool that suggested to me that my photograph was 'invalid' due to being 'in black-and-white', somehow missing my blue chequered shirt. The whole of the Gov.UK site loads very quickly for me, which is an additional benefit of the focus on accessibility. You can 'view source' on your Web browser and see the very comprehensive metadata, both as JSON-LD and traditional <meta> tags.
The 'Universal Credit service'[2] (the recent social welfare system), however, was seemingly not developed by the Government Digital Service, and it shows! It is still marked as 'Beta' years after release, uses a shockingly insecure authentication for sensitive personal data, and has a video conferencing system that can't show video. To top it all off, they very politely request feedback... but provide no feedback form.
I think that illustrates well how easy it is for an excellent toolkit to be abused in the hands of the incompetent or the underfunded, not that the latter is likely to apply in this case[3]! I hope this provides some context related to your question.
[1]: https://www.gov.uk/apply-renew-passport
[2]: https://www.universal-credit.service.gov.uk/sign-in
[3]: https://en.wikipedia.org/wiki/Universal_Credit#Implementatio...
It’s now easier than ever to make a government form!
And, even when a process might be better delivered via a different mechanism… a form becomes a low friction way to do it.
And a bad form might be worse than no form.
"Each form needs an email address to be set for completed forms to be sent to when they’re submitted"
So... erm is an email Inbox needed for integration? - how very 1990!
In addition to email, for use by developers in other UK GOV departments - surely HTTP PUT of an XML or JSON document to a user nominated URL (with provided auth token) would have been trivial to achieve?
You can set up filters and forwarding rules. It doesn't require a programmer or special knowledge to do so.
The queue can be viewed by one or many humans.
Messages don't have to be dealt with in-order.
read/unread state, stars, labels, drafts all allow construction of advanced workflows with no specialist knowledge.
Sure, all these things can be done better with special software, but there is a massive benefit to something that all your existing untrained and probably-not-well-paid employees can set up themselves.
Often the thing you are replacing is 'fill in this pdf and email to this inbox', so it allows people to improve things for external users without changing their workflow.
> surely HTTP PUT of an XML or JSON document to a user nominated URL
This is the bit that's more tricky than a static site. And then you need to do something with the data.
PS: Does anyone know the stack they use?
nhs.uk is built using Wagtail, a Django based CMS.
That's not hyperbole.