Comment by Nextgrid
4 years ago
But given how easy it is to foil, I don't understand what it "authenticates".
If you wanted to truly authenticate residency or at the very least prove that someone has access to the mailbox, sending them a one-time auth code per mail would be a better idea rather than relying on third-party services where people may use paperless billing for convenience.
I explicitly said it was not good authentication. :)
Mailing someone a code would be more secure but, to the parents point, would be even more onerous of a process for people to comply with.
Some comments above suggested above that this is an intentionally burdensome process, but to the contrary, bringing in a bill is one of the least burdensome ways to authenticate residency.
> bringing in a bill is one of the least burdensome ways to authenticate residency
My problem with this is how is the recipient supposed to authenticate said bill. Now we're talking about bringing a paper bill vs a printed one (or "faking" a paper bill by creasing/folding the printed one), but the real threat is fraudsters completely making up a fake bill to begin with. Unless the recipient has a relationship with the company that issues the bills, there is no way for them to verify whether the bill is real in the first place, making the whole endeavor pointless and only inconveniencing legitimate users.
Yes. There’s no question that a bill is a weak piece of evidence for residency. I am sure it only prevents low-effort or low-skill fraudsters, or casual fibs.
The latter is probably where they get the most utility out of these requirements.