
TL;DR
America.gov has been launched as a centralized AI-driven portal for federal services, promising strong privacy protections. However, its underlying Login.gov system raises concerns due to the introduction of long-lived tracking identifiers.
✦ Why It Matters
Evaluate your own systems for similar tracking mechanisms and ensure user privacy is prioritized.
Key Takeaways
How It Works
America.gov utilizes Login.gov for authentication, which now includes a function that generates a unique identifier (nds_experiment_uuid) for each browser. This identifier is stored as a permanent cookie, allowing the system to track user interactions over a long period, even before authentication occurs.
⚠ The Catch
Despite claims of privacy, the long-lived identifier raises concerns about potential tracking of user behavior across multiple visits, which could lead to privacy violations.
Related