2 ms·
> Is it security? Yes. Online voting is not secure (at least not secure enough for "voting", which is a very different security environment than even "banking
by pwg 8y ago
> Is it security?
Yes.
Online voting is not secure (at least not secure enough for "voting", which is a very different security environment than even "banking").
If your online bank account is heisted, your bank can:
1) trace the transfer, and reverse it
2) give you your money back while they do #1
I.e., the "security environment" is one of "we can easily clean up the mess after the fact".
Voting is very different. It has to be "annonymous" (in order to function properly and avoid coercion and/or vote purchasing) and that whole "annonymous" aspect precludes all of the "clean up the mess after the fact" abilities we have for non-annonymous situations.
So it (voting) has to be secure up front, and it can't rely on "clean up the mess later" recovery processes.
Which leads to why online voting is problematic. For voting, the verification needs to be that you, the human standing in front of the polling place operator, is indeed who you claim to be. All forms of "online" identification identify that "the unknown human typing on the keyboard has typed information we believe to only be known to human X, so the unknown human is likely human X".
I.e., you could give your online voting password to someone else, and they could type it in, and the system would not know it was someone else typing it in. You likely can't give your photo ID to someone else (unless they are your twin) and have them pass as you while standing in front of the polling place worker.
Same as for scanning the drivers license bar-code (which, by the way, is not done to "ID" you, but just to make it easy for the operator to pull up your record from the DB to mark it "has voted" [i.e., the scanning is simply a 'data-entry' task]). Someone else could obtain your license (theft or you handing it to them) and they could scan it on their phone and the system would have no way to know it was not you standing there doing the scanning.
This issue will always be the problem with some form of 'online' voting. Verifying that the human at the controls (keyboard) is in reality the actual human to which the credentials do in fact belong.