Re: [gentoo-project] [pre-GLEP] Secrecy-respecting voting mechanism for Gentoo projects

[Rich Freeman <rich0@gentoo.org>]

On Sat, Aug 28, 2021 at 6:30 AM Michał Górny <mgorny@gentoo.org> wrote:
>
> 3. When the voting phase beings, the system creates random identifiers
>    for all voters.  Each identifier is encrypted using voter's PGP key
>    and sent via email to the voter.  The voter-identifier mapping is
>    discarded immediately to reduce the risk of it leaking.
>

What happens if an eligible voter reports they didn't get the email
(most likely because email is horribly broken, but it could also be
nefarious)?

I suppose one solution would be to save the encrypted emails before
they are sent.  Then if one is missing it could be retrieved by an
admin/etc and resent.  Since the contents of the email are encrypted
the only info divulged is that somebody was an eligible voter in the
election, which is generally semi-public record around here.  This
avoids creating additional vote identifiers and eliminates any need to
question the validity of the complaint.

-- 
Rich