The key property we need to be looking for is software independence. https://people.csail.mit.edu/rivest/RivestWack-OnTheNotionOfSoftwareIndependenceInVotingSy

The key property we need to be looking for is software independence. https://people.csail.mit.edu/rivest/RivestWack-OnTheNotionOfSoftwareIndependenceInVotingSystems.pdf https://people.csail.mit.edu/rivest/RivestWack-OnTheNotionOf... That doesn't mean that securing the software isn't important. But it does mean that, in any evaluation of a voting system, we should be evaluating the whole-system design (including the critical parts of the software) in terms of how software independence is achieved.