I live in California and have been wanting this for a while now. I just recently found out that California has a limited public rollout from last year [1], but it does _not_ have Apple Wallet support, yet anyways.
Nice job Hawaii!
1. It tells me I need to refresh my license. I click the button.
2. It tells me I need to log into the DMV website. I grit my teeth and log in.
3. It tells me my password has expired and I need to update it because no one there has read the NIST guidelines. I snarl and update it.
4. I get an error message that the system is temporarily unavailable or something and my password can't be updated, so I can't log in, so I can't refresh my ID, so I can't use the app at all.
At this point I only keep testing it out of sheer bullheadedness and a high pain tolerance.
Why so many government services in the US have such an obsession with scheduled periodic password resets, which the government's own standards body recommends against, is baffling.
I have no idea. OK, I lied. I have some idea. At a previous job I had a meeting with an enterprise customer who was auditing our security controls. Part of the conversation went a lot like this:
Them: How often do you require your employees to change their passwords?
Me: We don't.
Them: Hehe, you'll have to start doing that!
Me: We comply with NIST 800-63B section 5.1.1.2 that says not to do that unless you suspect a password's been compromised.
Them: Uh, what? Can you send me a link?
Me: You bet!
My boss, to me in Slack: OMFG did that really just happen?
Yes, I did have (and do have) that exact citation memorized because it came up often enough that it was handy to bust that out. "Do you rotate..." "NIST!" "...once every 90..." "SP 800-63B!" "...days?" "5 dot 1 dot 1 dot 2!"
https://www.apple.com/newsroom/2024/08/drivers-licenses-and-...