@HcInfosec @jeroen Yes, and every technical expert who has seriously studied online voting as come to the same conclusion about the risks, because there are fundamental problems and requirements that preclude building an Internet voting system sufficient for civil elections.
It's not that scientists don't think Internet voting would be nice. Just as physicists don't think perpetual motion machines wouldn't be terrific. It's just that they understand fundamental reasons we can't make them.
@HcInfosec @jeroen You want an Internet voting system? You have two choices. One is to relax some of the basic requirements and civil rights associated with voting (at least in the US), such as the secret ballot. The other option is to have elections where we can never be sure who actually won, and that are vulnerable to disruption by anyone connected to the Internet.
Neither option seems great.
@mattblaze @jeroen I think one could minimize chances of votes becoming public and accept that a chance of your vote becoming public exists but is very small.
One could built several separate ledger counting systems and a non-public in between decentralised open-source system. The third system could be counting in max 5 votes per unit and then encrypt it.
You still keep the problem that some decentralized system holds the keys, but that is also true for voting now: you can simply add a few cans with voting papers too.
For me the biggest issue is: how do you reliably and in mass prove id's or authentication
With eidas that problem is tackled
@HcInfosec @jeroen Well, I guess you're the expert.
I give up.
gutsy to reply to someone to tell them to go away in *their own thread...*
if you want links, perhaps you should start with matt's cv, it's full of them https://www.law.georgetown.edu/faculty/matt-blaze/
I'm not gonna say Matt isn't a dick, but he has been having this same conversation with thousands of uninformed people for years. It's tiresome *watching* it happen let alone being the target of so many people who seem to be angry at him for existing.
You jump in a thread with a guy who's been researching voting methods for decades and has had every damn discussion under the sun, you have nothing useful to contribute but you do want to yell at him because you think there should be a solution and he's just... what, being ignorant? Willfully deceptive? What's your end goal here? Do you want the right solution or the solution you want to be right?
If you were asking Schneier why we don't use MD5 anymore, would you be surprised if he mocks you for not even doing the most basic of research?