Would still need an audit to make sure sites are actually using the shared auth and not rolling their own.
I'm saying we need the digital equivalent of "show me your driver's license".
It's what the IRS uses.
Fundamentally, it has given control over the DNS records to a different country (.me == Montenegro).
It's training people that really, any domain could be a government domain, you'll never know.
It's the company providing the service that the government could provide on its own, but that service is being provided by a private company through a lucrative contract agreement.
"Scan the front and back of your Driver's License."
[upload scan of front of DL @ 200DPI]
"Unable to find a face in the image you uploaded."
[upload scan of front of DL @ 300DPI]
"Unable to find a face in the image you uploaded."
Huh. Maybe I'll try with a lower resolution.
[upload scan of front of DL @ 72DPI]
"Thank you, now please upload the back of your Driver's License."
Hmm, 72DPI worked for the front, so...
[upload scan of back of DL @ 72DPI]
"Unable to read a barcode in the image you uploaded."
[upload scan of back of DL @ 200DPI]
"Unable to read a barcode in the image you uploaded."
[upload scan of back of DL @ 300DPI]
"Thank you for verifying your Driver's License".