USPS In-Person Identity Proofing
faq.usps.com
faq.usps.com
https://www.login.gov/help/verify-your-identity/verify-your-...
Really excited as this rolls out fully for Login.gov high IAL (identity assurance level) use cases (ie IRS logins). If someone from Login.gov can comment on why state IDs are accepted, but not US passports and other federal identity credentials, I would be interested!
(tangentially, behold, your government and two exceptional public goods [Login.gov and USPS] working for you efficiently and in public)
If you don't want to drive, don't want to buy alcohol, don't want to travel internationally, etc, certainly, you can go without a state issued ID or driver's license, or a US passport. That is a choice. You're still going to need to prove who you are to rent formally, transact in real estate (buy a home with or without a mortgage), apply for state of federal benefits, obtain non emergency healthcare, etc.
That said I personally agree with you.
it is intellectually dishonest, or motivated reasoning as they say, to imply that I said anything to the contrary. Perhaps you can reconsider that assessment of the comment ?
Did I read this wrong? It sounded like you were insinuating that these use cases shouldn't required strong identity assurance. If that is not what you meant, I apologize for reading the statement incorrectly. If identity credentials are provided at low or no cost to prevent marginalization or disenfranchisement, I see no issue. Those credentials are then leveraged for all other systems that require identity proofing. That widow will need to prove who they are for social security benefits, medicare, or to receive an estate from a deceased partner (including removing them from their home's deed if held together, or accepting retirement accounts as a beneficiary). That college student will need to prove who they are for government funding aid, student loans, and to enroll. Disenfranchisement is very real, but so is identity fraud.
People who want strong privacy and governance around identity aren't wrong, they are simply solving at the wrong OSI layer by saying the technical implementation of identity systems shouldn't be good. Fix tech problems with tech, fix people problems with people.
If you've been in the industry for any significant amount of time (over a decade), you'd know that the way things work out is
A) Solve all problems (including people problems) with tech.
B) Create new problems as a result.
C) Goto A
D) As loopcount of A-C increases, the familiarity with how to solve people problems successfully and fully with people starts to wane.
E) Crappy people problem solving systems technically solved require and equip newer generations with survival skills to navigate the flawed technical solution, but not with the flexibility or experience to thrive in an environment without said systems or imagine an alternative process.
F) The world begins to look more and more insane and delocalized over time to new entrants, who now have to cope with the fact that biology equipped us to handle local state management, but increasingly, remote state management is becoming a required survival skill.
G) Human beings do not have network cards integrated into their biology. (Thank god.)
H) Duct taping on the technical solution to G) just makes the original problem we're trying to solve even harder.
I) Somewhere in here is a Paxos joke.
I'll even offer the example of blockchains and cryptocurrencies as an example of this flow.
Our financial system pre-2000's was heavily "Oh, this is a people problem", with heavy employment of "develop a human relationship to get things done." Post 00's, with things like AML/KYC, our institutions are skewing such that the digital metadata (and not the relationship between persons) is the kernel for getting things. This makes identity fraud easier, because now instead of your bank people getting to know everybody, it's "computer says yes/no". Enter cryptocurrencies (the penultimate technical solution, no human involved, just shluffing bits between private keys). Nobody knows anyone anymore. Nobody wants to. The reversal and fatfinger problem still exists and is even worse over those mediums. Now we also have new problems from everyone wanting to take all this financial activity and make it public. Making the original ID/Trust problem even worse.
Now everyone is required to understand network theory and distributed systems to be able to hew out a local truth state, but maximally ill equipped to do the actual hewing, because the skills that got you that truth state in the first place were social, which we've done everything possible to technically engineer away.
Repeat. Repeat. Repeat.
That's a very strong and parochial claim.
Good, reliable, trustworthy, functioning government has existed for between 5,000 and 10,000 years depending on which anthropology you follow.
For almost all of that time, governments have had scant legibility into the size or makeup of their population, barring a rather crude census every now and then.
Identity at individual granularity happened practically yesterday, and is still a project in progress for many nation states. It's really a function of global travel, banking systems, modern social welfare benefits and healthcare.
A well designed government does not need micro-relations with each and every citizen, but works fine in aggregation, devolved autonomous subsystems and heuristics.
The "Government needs to know all about you" is a technocratic conceit less than 100 years old.
I remember, as a kid, when Canada rolled out the Social Insurance Number, only for tax use! Now it's used for everything.
And later... health cards! Used to be, you'd just wander into a hospital.
Now you need endless id for everything.
50 years only!
It's really absurd.
FWIW: buying with owned funds is easy, selling is hard. Sellers don't really care about identity verification as long as the funds are good. OTOH, buyers/lenders/title insurance issuers do want the sellers' identities to be solid, because if they transacted with the wrong person, they are going to have a bad day. Lenders probably also want the buyer to be well identified, because it'll be a mess if not.
It took quite a while to work out something that would be accepted for the title transfer.
There are plenty of non-dystopian ways for people to do that. I was able to prove that I'm ComposedPattern by typing my password. For a higher-stakes identity, I might provide biometrics or show that my appearance matches a previously-provided photo. Those things are possible without involving the state. In fact, it might surprise you to learn that people got healthcare and paid for housing before the early 20th century! The government doesn't enable people to prove who they are. It forces people to use a single state-controlled identity for, at first, just government services... then finance, then healthcare, then transportation... and now there are bills being proposed everywhere to require government ID for "age verification" to use porn sites or "social media".
Or one could simply trust a democratically elected government with that instead...
I don't mean to strawman, but, isn't this all to prevent the 75-year old widow from losing her retirement savings by scammers? Don't let perfect be the enemy of good, sure there are issues, but there needs to be something.
Inefficiency is strangely sometimes the only reliable way to prevent consolidation of power.
In the US maybe. Every other developed country has them, one way or the other.
https://help.id.me/hc/en-us/articles/8214940302999-Internal-...
You bring up an interesting edge case though. I will reach out to my State Dept folks to ask about supporting Login.gov identity proofing IRL at embassies and consulates for expats.
That said, the IRS doesn't really want you on their sites if you don't have a US address. I struggled to get transcripts on the site (but they allow you to submit written requests for them). This is a reasonable thing for the IRS to implement given the significant interest in fraud from their systems from people overseas.
Except that US tax law also requires that all US persons, worldwide, to file US tax returns (note: this is a superset of US citizens).
So if the law applies to expats and to anyone who has ever applied for a green card even if denied or not used or not revoked, then the system needs to support worldwide access.
Your struggles were probably with the previous system, which only allowed creating an account with a US address. It did however allow placing an online request without an account for a transcript to be mailed to a foreign address. I did this successfully myself and received the mail in Canada.
This is how code signing certificates should work. Better yet, let them be issued with a simple OAuth flow through sites like login.gov where people have already been verified.
The current system is the worst of everything. It's a convoluted process with geographically and culturally disconnected people doing verification for (primarily) businesses that don't even need to be tied back to a natural person or beneficial owner. To top it off, it's ridiculously expensive for an individual or open source project.
Microsoft also plays a huge role in propping up the currently broken system by trusting EV certificates more than personal certificates even though the identity of a natural person is far more valuable than the identity of a shell company that can easily be used by bad actors.
In one way I dislike identity verification systems like this because I think it's going to increasingly disadvantage people that are already less fortunate, but in another way I hope that it can be used to improve some of the terrible processes we have to endure when it comes to identity and trust.
This sort of "price people out of being annoying or doing things they don't remotely need" technique is extremely common in society.
EV certs involve a pretty lengthy number of checks, by the way. Having a PO box isn't enough.
The problem with that is the way companies like Microsoft handle them. Instead of telling the user "this is a low value cert", they put up a massive warning telling the user their computer is going to melt down if they trust it. It makes the decision of whether or not to run something binary and it's not.
I think a system where I could sign things as trivial as PowerShell scripts would be better than what we have now. Anyone I give something like that to is going to know me personally and can easily judge the trustworthiness of what they're running by seeing my name.
> This sort of "price people out of being annoying or doing things they don't remotely need" technique is extremely common in society.
From what I see, it makes things difficult for someone trying to provide fair value and favors anyone willing to price gouge their customers. Even worse, criminal activity is extremely high margin and industrial scale bad actors have no problem paying for things like EV code signing certificates.
> EV certs involve a pretty lengthy number of checks, by the way. Having a PO box isn't enough.
And, based on my experience, it's all a big clown show. The people doing the verification are at a huge informational disadvantage because (I'm assuming) they're in a processing somewhere with minimal training and are expected to verify identities for every jurisdiction in the world. It's like me trying to verify the identity of someone in China. No matter how much training you give me, I'm probably never going to be as good at it as a local would be.
The whole system could be better. I would prefer to see something where everything starts with a personal code signing certificate for a natural person and where getting an EV certificate requires an attestation from someone with a personal certificate. My identity is more valuable than a shell company.
There's no incentive for anyone to fix it either. The platform owners benefit immensely if people abandon a standardized code signing system in favor of the signing certificates they issue for their app stores. IMO that's half the reason Microsoft abused their market position to kill AppGet. Anything that improves competition for app distribution isn't going to be allowed.
The USPS is in an ideal and probably unique position to implement verification. Each office already has a handful of people who know you, personally, by name and location. They could pre-verify a large number of people without collecting or distributing additional info.
Most of my USPS experiences are great once I actually get to the desk, but it might take 45-60 minutes of standing in line before I actually get there.
(+) yes, yes, we all know that the "government" part of USPS is a bit strange, albeit not as strange as Amtrak.
It sounds weird when its stated, but they are the only government entity that sends an employee to your house 6 times a week. It could quickly turn distopian but I could imagine the mailman becoming your single stop for interacting with the government and its services.
Federal documents don't have authenticated addresses. The view seems to be that only state agencies are capable of verifying you actually live at the address on your ID (See Real ID for more context).
I wonder why that matters. If I am provably who I say I am, why is the address important?
Also, not specifically for you, but generally what about states that don't reissue IDs when someone moves? (I suppose their answer to that is "get an updated ID and try again".)
> what about states that don't reissue IDs when someone moves
Do these exist? I'm not aware of any state that doesn't require you to update your address when you move.
There's a small section marked on the back that is specifically for it.
I guess if you move multiple times within the expiry period, you can pull the old sticker off and replace it.
https://www.dmv.ca.gov/portal/online-change-of-address-coa-s...
> Will DMV send me a new DL/ID or registration card once my Change of Address is complete? No. New documents are not issued when you change your address. However, you can request a replacement DL/ID or replacement registration card after you confirm that your address was changed successfully.
If you move, you must notify DMV of your new address within ten days. Submit a change of address online at dmv.ca.gov/addresschange or by mail. It is your responsibility to ensure DMV has your correct mailing address on record.
So if you get pulled over and a cop runs your license it will show your new address. On the other hand the bars etc don't care they just look at DoB and expiration.
If you're purchasing a firearm though they do run the real address, and if it's not accurate you could be in trouble.
Cue state system "fun" for military folks who have a home of record they're legally-entitled to keep, despite not being resident.
Real ID isn’t about this. Federally issued IDs like passports and NEXUS or Global Entry cards can be used in every context where the REAL ID Act’s requirements apply to state-issued driver licenses and non-driver IDs, without any exception I’m aware of, even though these federal documents are not proof of address.
But sure, your explanation might well be the justification behind this USPS / Login.gov policy.
Huh.. that's interesting. In India it's mostly the other way around. Federal document addresses are mostly verified but state level ones are not.
I think added to that is that Americans have a historical tendency not to trust any kind of federal govt oversight/information collection
Electric fences and RF food collars feel icky to cows in pastures that don't have them. Cows who already have them don't seem to notice.
Anyway, they get around this by using their Social Security Numbers everywhere. All residents have one. They use this in a novel way, where it’s both a username and a password, that you share with every corporation who asks. You’re supposed to keep it very secret because people can open financial accounts in your name with this number. But not that secret. Your utility company may ask for it and won’t provide service without it.
Since it’s both a username and password, it’s stored very securely. Except when it isn’t, breaches happen, and people have no recourse. It’s immutable, so they can’t do anything other than say “don’t process any credit checks for me” and hope that works.
Anyway, that’s the short version of why Americans are terrified of being assigned an ID, actually have an ID (SSN), but can’t use that ID because it’s super secret, but then use it everywhere anyway because they have no choice.
https://www.aclu.org/press-releases/broad-coalition-urges-pr...
A national ID would indeed have us quickly slipping toward… something… and of course it’s unsavory if it has “federal” or “national” anywhere in it.
I leave my identity management to the private credit bureaus, who are guided by the infallible hand of the free market, thank you very much.
Ok but I still don't understand what power are you consolidating here.
If the federal government decided to issue an ID card valid for all citizens, what's the issue?
You already have something that work that way and it's the passport.
Now, I know that having a passport is not mandatory but if tomorrow the US government decided to issue passports, for free, to all citizens, would that be an issue?
Drivers licenses (/IDs) are used for everything else pertaining to someone's daily life. In this way it affects how/who/where/when people drive, vote, buy and sell controlled things, engage in some financial transactions, travel domestically, obtain social benefits, etc.
It allows local authorities to be gatekeepers. A commonly used and carried federal ID would shift that gatekeeping authority to the feds. It could also enable additional gatekeeping which is not currently possible in the absence of this ID, which is a primary concern of the people who are against this.
To paraphrase Charleston Heston, they can put a national ID in my wallet when they pry the AR15 from my cold dead hands. Never mind I am trusted traveler with global entry and I have a real ID state drivers license. Never mind the Chinese government hacked the federal Human Resources database all those years ago and have the data for anyone who took a paycheck from Uncle Sam.
https://en.wikipedia.org/wiki/Office_of_Personnel_Management...
Fun fact, until 2011 SSNs were loosely based on where you were born. If you were a bad actor and wanted to use a fake SSN, just change a couple of numbers at the end and you could get a new number of someone that was born around when you were, in the same hospital as you.
My wife and I ended up moving (within California) on short notice that overlapped my wife's unrelated trip out of the country. Despite very clear documentation on the USPS website about the documentation required for me to verify my wife's identity (and my relationship to her) in order to complete a Change of Address order on her behalf, the USPS employee immediately and aggressively accused me of attempting identity theft. No amount of showing him the USPS documentation about how to verify a spouse's identity would convince him.
At the second USPS office I tried, the guy was very nice, but also said that due to a high rate of identity theft they are refusing to do anything without the person there.
Luckily we only had a short interval where mail wasn't being forwarded before my wife returned and verified her identity in person, and probably didn't miss any important mail.
I ended up changing my billing address in my bank to exactly match what USPS wanted. Which worked, and was fine, but did leave me wondering what would prevent someone else from doing that with their own bank account if they wanted to change my address for some weird reason.
I thought it was common knowledge to, when moving to a new address, check one is using the correct formatting via the USPS online validator.
It's picky because "rd" is not valid. You would know this if you did a simple google search:
They managed to deliver mail to the previous address for years, so I guess they were able to figure it out.
Why do you think I’m upset? It was slightly annoying but not really a big deal, easy enough to fix, just thought it was a funny story.
To the human part: If you send a letter to a residence; and only include a street address plus 5-digit Zip code, or a street address plus city/state without a Zip code; that's enough to get the letter through. The envelope might be scanned at the originating point, and the image sent to a human for review, or the letter might make it to a post office at/near the destination, and a human will take it.
Sticking with the "rd" / "road" example: When the bank goes to mail something to you, I wouldn't be surprised if they run the address through a validation program. That validation program would catch things like "rd", replace it with the appropriate term, and also generate the Zip+4 code. What's missing is feedback from that program. So the bank might continue to have "rd" in your address, even though it's wrong.
1600 PENNSYLVANIA AVE NW
WASHINGTON DC 20500-0005
This is the part of processes that annoys me the most. A company or agency will publish the rules they want people to follow, then there's a 30% chance that when I go to follow them, I will be denied because of an unpublished rule or an exception like this of "oh, well we're just not doing that right now."
The whole point of the USPS policies on being able to confirm a relationship is to avoid identity theft. If the policy is no longer going to be used then remove it! Or, better yet, update it.
(With deference to all the other, amazing USPS folks I've worked with!)
The best approach is usually to go to another postal branch when you run into a bad egg... and/or go during a time of day that it's quieter.
(looks like this is what you are reporting, but the phrasing is a bit ambiguous on that detail - thanks!)
If someone is ill, then you should use the remote options that are already available for ID verification. ID.me has tip for friends & family that are helping with this:
https://help.id.me/hc/en-us/articles/4589202735639-Helping-f...
If a person is ill, and the normal (remote) methods don't work, my suggestion would be to reach out to the Postmaster for your local area (if you have multiple post offices in your area, there may be one Postmaster for all of them). Meet them in person and explain the situation. Before you reach out, get documentation from a local doctor to back up your case. Ask what options are available.
If someone is incapacitated, then identity verification is not going to work, but that's the point: If you don't currently have the capacity to participate in transactions, that responsibility falls to someone else (spouse, next of kin, power of attorney, court-appointed person), etc..
Scanned my Driver's License at 200dpi.
"Unable to find a face in the image you uploaded."
Okay, 300dpi.
"Unable to find a face in the image you uploaded."
Huh.
Scan at 72dpi.
Success.
Scan back of DL at 72dpi.
"Unable to read barcode."
Scan back of DL at 200dpi.
"Unable to read barcode."
Scan at 300dpi.
Success.
What a shitshow.
It's not efficient by any means, but in my view it beats the US practice treating an SSN as a password, together with bizarre "security questions" sourced from public records that some banks use as a "verification method". And no, "phone number verification" (that really only works for phone numbers with the big three mobile carriers) should also never have been a thing.
I really, really hope to see a usable-by-everyone identification method one day, as opposed to "usable by enough", with a sizable fraction of the population just being denied access to credit, banking, and more, just because they don't exist in the expected form in some creepy data miner's database.
Ironically, German ID cards support exactly such a method: You can just tap it on your iOS or Android phone for a "qualified electronic signature" as defined by EU law. And as a non-citizen, you can now finally get an "e-ID only" card, so nobody is excluded from that scheme! Unfortunately, I don't know a single person that remembers their six-digit PIN that's required for that feature...
IIRC, enabling that feature is optional (disabled by default), and if you never enabled it, you don't even have that six-digit PIN.
I discovered this recently when I wanted to use the gloriously named AusweisApp2 (ID app 2, superseding a PC app which was at least forward thinking enough to be called ID app 1).
In theory it's simple to request a new pin - you can even do it within the app! However I've moved since I acquired the card, and so instead of the reset mails going to my registered address, I can only assume they went to the address stored on the card. And in a catch-22 of course you can only update that with a pin...
But no worries, you can simply book an appointment at your nearest buergeramt to have a pin reset in person; except there are no free slots in the next 3 months.. anywhere!
I needed documents for a new visa, which should give me a new card (and hopefully a new pin!), which ultimately turned out to be faster to do than trying to sort out the damn pin
I bought pet insurance at one point for a dog and now I regularly get quizzed on pet names when I get those questions. It will be things like “have you ever owned a pet by the name of a b c” and the answers are absurd because they are pet names.
The best one was Ulysses S Twinkletoes. I still have a screenshot of that years later
A far more popular option is logging in via your bank, which is an excellent idea IMO, as they already have your data anyway and can usually verify that it's you with fairly high confidence.
The US has that too, in a way – I've once had a call center agent of a prospective new bank call my existing bank and have _them_ verify my identity on the line!
Of course, that identification then was also only the usual "what's your dog's zodiac sign" and "which gives you more goose bumps, nails on chalkboard or fingers on unpainted concrete".
PostIdent (go to post office, get verified, send confirmation by mail) does not support Indian passports, among many others. The video replacement has the same flaw. You are legally entitled to a bank account, but a large portion of immigrants are left out.
Many banks now require a plastic residence permit. In Berlin it takes a few months to arrive. How do you pay your rent while you wait?
The residence permit is an eID, but I don't know anyone who activated it. You get an activation code weeks before the permit arrives, but it doesn't explain why it's useful and the activation requires an in-person visit somewhere. So I'm told; I have not activated mine.
Soon they want to use the eID for the address registration. This would save everyone an in-person appointment... except immigrants who must register long before they get a residence permit.
Fortunately, there are old Germans who must also be accounted for, so old-fashioned bureaucratic services exist in parallel.
France allegedly has a good method: the postal worker knocks at your door and verifies your identity.
As a side note, it is kind of funny when Indians complain about German bureaucracy.
There is no straight answer. It's just complicated. You either send money through another channel, or choose from a smaller selection of banks until you get a residence permit. I can't answer so easily because I opened my account 8 years ago and things got harder since then.
This is exactly why European banks aren't offering market-level deposit interest rates. KYC friction like this introduces a huge market entry barrier.
It should be perfectly normal to open a new bank account with a new bank online!
I just had one the other day give me a multiple choice option for the last 4 digits of my SSN. The same SSN I had free form typed into a box a half page up.
I’d like to see options for the unhoused and unbanked:
Homeless people get ID verified, get virtual mail access: all mail scanned and available online, physical mail at closest zip
Low income unbanked get access to free banking options
All laws can be changed
In the US, a similar thing happened for American Express and Western Union, which also started out as postal and telegraph service providers before they became financial service providers.
It would be awesome if that could be expanded!
Mail scanning is a service already provided by private companies. For example, a random search returned this result for a store in Los Altos (near Mountain View): https://www.villagemailcenter.com/Products-Services/Digital-...
It would be awesome if a community-services provider could set up something similar, but it's worth noting the USPS does have two services which might work:
• https://faq.usps.com/s/article/Is-there-mail-service-for-the...
I hope this system expands further, and even that local governments also start to use it.
The virtual world has opened up new channels for fraud and it seems government is just way behind on this. Almost to the level that some institutional trust is starting to break down (not to be too exaggerated about it though). (see pandemic relief funds)
Would it be too much to ask for a Keybase style app on top of this? One can hope...
I hope it doesn't become the default for most sites (which have no need for your actual identity) but for many use cases I can see the need for varying levels of identity tied to your real identity.
Minimally, login.gov could issue a (globally) unique token which they will only issue one per user per site, which would effectively allow the site to enforce a 1:1 human:account ratio (or at least know which accounts are linked to which humans) without disclosing any actual details of the human.
Varying levels is probably the right approach.
For most sites all they need to know when I create an account is that I control the email address that I am using to sign up. If I ever again need to prove my identity to them proving that I receive email at that address is good enough.
For the site that provides my email address they need something other than email to identify me.
If I'm using an email provider that lets you bring your own domain, they could use proof that I control the DNS for that domain as proof of identity.
How to prove identity to my domain registrar? I could use an email address that is not hosted somewhere that depends on my proof of domain ownership, like gmail or my ISP, but that is probably not a good idea. Ultimately, my ability to prove my identity at most sites would depend on proving identity to my domain registrar (or to my email host if I don't have my own domain), and so making that depend on remaining in good standing with Google might not be wise.
What we need for proving identity to a domain register (or an email provider if you don't have your own domain) is something that we can be sure we can rely on, because in the worst case when you've been massively hacked and your identity has been stolen at multiple sites and services that is going to be the identity proof you count on to let you recover everything else.
For that something like the USPS identity service would be great.
If you’re a US citizen that resides abroad, you’re already denied a login.
It’s a good start, but it’s a long way from being a “default”
"Identity Proofing" makes it sound like something that prevents you from being identified.
Although I will tell you, don't ever eff with a postal inspector. Those people have police powers that could make a game warden salivate.
https://www.fbi.gov/how-we-can-help-you/more-fbi-services-an...
The specifics of what they record in a verification is a bit vague and I would be concerned that some would sell celebrity accounts, or a way to get into an account used for private financial access, etc, even if the access to identity with other government agencies is theoretically a bigger pot.
Definitely a stretch goal considering resourcing, inter agency partnership challenges, and uptake of trusted traveler programs across the general populace, but not technically infeasible. TSA is already testing automated credential proofing terminals at airport checkpoints, for example, and CBP Global Entry terminals for international arrivals are already automated kiosks.
https://uspsblog.com/usps-self-service-kiosk/
https://www.cbp.gov/travel/biometrics
https://thepointsguy.com/news/global-entry-facial-recognitio...
https://thepointsguy.com/news/tsa-facial-recognition-softwar...
(you probably don't need this if you have global entry, but fun thought experiment considering data sources and technology implementation feasibility; maybe upgrade someones IAL automatically at Login.gov when they're doing their Global Entry or PreCheck interviews at CBP?)
Instead of, you know, investing in building a well functioning government.
Tangentially, to share what is inside my head when I think of problems like this, I think "How could these events that would normally need to be explicit be automatic in the background? So that when it happens, it delights the government service consumer and feels like magic." If someone goes, "Wow, that was fast!" or "Wow, that was painless!", or just "Wow!" in general, government is delivering on its mission, and removes excuses for folks who would say "government is ineffective."
I would argue the problem is not verifying identity for voting in elections.
>the registrant will be given the option to have their identity verified in-person at a participating USPS retail location
Login.gov also offers remote identity proofing (eg photos of your ID)
Why would people need to go to a post office? In my country (the Netherlands) we no longer even have post offices.
There are a ton of references in this comment [1] if you want more information on this.
If they would first implement a good ID system that makes it so every eligible voter can get a suitable ID easily and for free (like I believe much of the rest of the word does) then very few would object to voter ID.