On Sat, Jul 27, 2019 at 11:40:12AM +0100, Roy Bamford wrote:
> On 2019.07.27 07:21, Michał Górny wrote:
> > Hi,
> > 
> > (CC-ing all parties interested in technicals, plus main consumers)
> > 
> > I'd like to work on providing new web-based frontend for voting
> > in Gentoo elections.  It would replace votify in the pipeline but
> > generate countify-compatible data, so the votes would still be counted
> > using old tooling.
> > 
> > 
> > Goals
> > =====
> > The goals for the new system would be to:
> > 
> > 1. Improve privacy of votes by removing connection between voters
> > and their confirmation IDs ASAP (not storing them unencrypted
> > on permanent storage at all).
> > 
> > 2. Unifying voting mechanism for developers and non-developers.
> > The latter currently vote by mail and get their votes manually hacked
> > into the system.
> > 
> > 3. Removing dependency on dev.gentoo.org shell access for voting. 
> > This
> > is implied by 2. but should also support any future efforts of
> > reducing
> > reliance on the single system in Infra.
> > 
> > 4. Make it possible to use the system for unofficial elections (e.g.
> > team lead votes).  Currently setting a vote up requires root
> > privileges
> > on dev.g.o which is not really feasible.
> > 
> 
> 5. Election Officials shall have a means to determine the voter turmout
> from time to time while the election is in progress.

6. The voting system must produce a list of voters who cast a valid
ballot. This is required to see which voters did not cast a ballot in
the Foundation elections, and could thus be struck off the member list
for failure to participate.

This might be implemented via two separate identifiers from the secret
per your ideas.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robbat2@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136