Comment by mmooss
4 hours ago
Who makes your ID card, generates the private key, and stores it there? Do you trust them? Did they retain a copy of the key? Did they implement security effectively (a very difficult task, considering the resources of attackers)? What about securing the manufacturing process?
In the end, you always must trust humans.
This is one big advantage of paper vote systems. You can still bribe, trick or coerce a single person. But it becomes much more difficult to do so en masse. Computer voting allows fraud at scale. It is much more difficult to scale an attack on a paper voting system.
Indeed. The rubber hose always beats cryptography. Always.
So if someone else knows my private key and voted for me not the same way i intended to vote, this will be visible in final results. And then you can start asking questions. If they have my private key and voted the way i intended, then its no problem :)
Why would others trust you to be telling the truth and not just lying to attempt to cause mistrust in the election?
Naive solutions have naive problems.
I’m not sure what you’re trying to say. That the “solution” to that is just to ignore both votes in the case of multiple votes per id?
1 reply →