> You can only know my vote if you have a way to associate an address with an identity. A secret ballot makes it impossible to verify votes even with collusion

> You can only know my vote if you have a way to associate an address with an identity. A secret ballot makes it impossible to verify votes even with collusion between the voter and interested party. That makes vote-purchasing infeasible, since I could take money to vote for you and still defect at the secret ballot box. A cryptographically-secure secret ballot in this threat model would need to provide the voter with a valid zero-knowledge proof for their actual vote and an imposter zero-knowledge proof for their alternative vote. Something like "if I input A into the system, then it counted vote X; if I input B then it counted vote Y," with A/B remaining private to the voter.