New testing at DHS shows a wide range in the performance of online identity proofing systems. Some simply don’t work well.