Digital mortgage service sounds handy, right? Oh, it's through UK.gov's Verify

Keys in hands of highly borkable ID gateway


The UK government is cracking on with plans for a digital mortgage service to be launched this year, which will allow borrowers to sign mortgage deeds online via the Government Digital Service's deeply flawed Verify identity programme.

Greg Clark, Secretary of State for Business, Energy and Industrial Strategy, said: "[The Land Registry's] new digital mortgage service will enable borrowers to sign mortgage deeds digitally, speed up the remortgage process and improve the customer experience."

In a written statement to Parliament yesterday, he noted that a new liability risk arises with the service because the Land Registry will certify the identity of a borrower when that person provides a digital signature in advance of registration.

"The risk of the new liability occurring is considered low. The new process, where the borrower's identity has to be verified through GOV.UK Verify combined with HMLR's independent security processes, should in fact reduce the overall risk of fraud.

"To date GOV.UK Verify has not identified a single example of fraud despite in excess of 1.25 million citizens' accounts having been created using the GOV.UK Verify service," he said.

Still from UK political comedy Yes Minister

Engaged to be worried – Verify borks married tax allowance applications

READ MORE

However, given the woeful performance of Verify, it seems fewer than half of users will be able to access the service based on the identity programme's performance rates to date.

Since starting in 2011 and officially going live in 2016, Verify has had a long and troubled history.

It failed to work for farmers trying to register for Common Agricultural Policy payments – with a back-up phone system having to be hastily introduced instead in 2015. Later that year, recipients of married tax allowance were also left unable to access HMRC's tax credits.

Fed up with the failing service, the taxman eventually confirmed it was ditching the system entirely, and will be pushing forward with its own replacement for Government Gateway for self-assessment tax users.

The Law Commission has also pointed out in its consultation on online will-making: "Verify does not currently ensure that the person entering the information is in fact the person he or she is purporting to be; rather it focuses on verifying that the person exists."

One expert on digital identity, who asked not to be named, said the use of Verify raised more questions than it answered.

"It's unclear what value Verify gives if the Verify ID companies have no liability and the Land Registry is still going to do its own checks anyway.

"What happens when a Verify ID company exits the market, as with Verizon? Does this mean as per the performance stats that over 50 per cent of people will not be able to use this service?

"How does the digital signature process work and how will someone prove they are the same person in say 20 years time? Does Verify have indefinite future funding and if not what happens if the programme ends? How will joint signatures work? There is so much unexplained."

Hat-tip to reader Rich Greenhill for spotting this update. ®


Other stories you might like

  • DuckDuckGo tries to explain why its browsers won't block some Microsoft web trackers
    Meanwhile, Tails 5.0 users told to stop what they're doing over Firefox flaw

    DuckDuckGo promises privacy to users of its Android, iOS browsers, and macOS browsers – yet it allows certain data to flow from third-party websites to Microsoft-owned services.

    Security researcher Zach Edwards recently conducted an audit of DuckDuckGo's mobile browsers and found that, contrary to expectations, they do not block Meta's Workplace domain, for example, from sending information to Microsoft's Bing and LinkedIn domains.

    Specifically, DuckDuckGo's software didn't stop Microsoft's trackers on the Workplace page from blabbing information about the user to Bing and LinkedIn for tailored advertising purposes. Other trackers, such as Google's, are blocked.

    Continue reading
  • Despite 'key' partnership with AWS, Meta taps up Microsoft Azure for AI work
    Someone got Zuck'd

    Meta’s AI business unit set up shop in Microsoft Azure this week and announced a strategic partnership it says will advance PyTorch development on the public cloud.

    The deal [PDF] will see Mark Zuckerberg’s umbrella company deploy machine-learning workloads on thousands of Nvidia GPUs running in Azure. While a win for Microsoft, the partnership calls in to question just how strong Meta’s commitment to Amazon Web Services (AWS) really is.

    Back in those long-gone days of December, Meta named AWS as its “key long-term strategic cloud provider." As part of that, Meta promised that if it bought any companies that used AWS, it would continue to support their use of Amazon's cloud, rather than force them off into its own private datacenters. The pact also included a vow to expand Meta’s consumption of Amazon’s cloud-based compute, storage, database, and security services.

    Continue reading
  • Atos pushes out HPC cloud services based on Nimbix tech
    Moore's Law got you down? Throw everything at the problem! Quantum, AI, cloud...

    IT services biz Atos has introduced a suite of cloud-based high-performance computing (HPC) services, based around technology gained from its purchase of cloud provider Nimbix last year.

    The Nimbix Supercomputing Suite is described by Atos as a set of flexible and secure HPC solutions available as a service. It includes access to HPC, AI, and quantum computing resources, according to the services company.

    In addition to the existing Nimbix HPC products, the updated portfolio includes a new federated supercomputing-as-a-service platform and a dedicated bare-metal service based on Atos BullSequana supercomputer hardware.

    Continue reading

Biting the hand that feeds IT © 1998–2022