From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 224FC138334 for ; Fri, 9 Aug 2019 05:49:58 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id CC806E0827; Fri, 9 Aug 2019 05:49:56 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 8562CE0821 for ; Fri, 9 Aug 2019 05:49:56 +0000 (UTC) Received: from grubbs.orbis-terrarum.net (localhost [127.0.0.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id DFF8A349719 for ; Fri, 9 Aug 2019 05:49:53 +0000 (UTC) Received: (qmail 28262 invoked by uid 10000); 9 Aug 2019 05:49:47 -0000 Date: Fri, 9 Aug 2019 05:49:47 +0000 From: "Robin H. Johnson" To: gentoo-project@lists.gentoo.org Cc: =?utf-8?B?TWljaGHFgiBHw7Nybnk=?= , Gentoo Elections , infrastructure , council , trustees Subject: Re: [gentoo-project] Re: [RFC] vote.gentoo.org - a new voting frontend for Gentoo Elections Message-ID: References: Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Project discussion list X-BeenThere: gentoo-project@lists.gentoo.org Reply-To: gentoo-project@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="0k7NRaGPjSSxFfo/" Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.11.4 (2019-03-13) X-Archives-Salt: 856d90a8-52ca-4717-aa2d-6e764459c47f X-Archives-Hash: c84b235d2e3b80706c3ee1007ed50f87 --0k7NRaGPjSSxFfo/ Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sat, Jul 27, 2019 at 11:40:12AM +0100, Roy Bamford wrote: > On 2019.07.27 07:21, Micha=C5=82 G=C3=B3rny wrote: > > Hi, > >=20 > > (CC-ing all parties interested in technicals, plus main consumers) > >=20 > > I'd like to work on providing new web-based frontend for voting > > in Gentoo elections. It would replace votify in the pipeline but > > generate countify-compatible data, so the votes would still be counted > > using old tooling. > >=20 > >=20 > > Goals > > =3D=3D=3D=3D=3D > > The goals for the new system would be to: > >=20 > > 1. Improve privacy of votes by removing connection between voters > > and their confirmation IDs ASAP (not storing them unencrypted > > on permanent storage at all). > >=20 > > 2. Unifying voting mechanism for developers and non-developers. > > The latter currently vote by mail and get their votes manually hacked > > into the system. > >=20 > > 3. Removing dependency on dev.gentoo.org shell access for voting.=20 > > This > > is implied by 2. but should also support any future efforts of > > reducing > > reliance on the single system in Infra. > >=20 > > 4. Make it possible to use the system for unofficial elections (e.g. > > team lead votes). Currently setting a vote up requires root > > privileges > > on dev.g.o which is not really feasible. > >=20 >=20 > 5. Election Officials shall have a means to determine the voter turmout > from time to time while the election is in progress. 6. The voting system must produce a list of voters who cast a valid ballot. This is required to see which voters did not cast a ballot in the Foundation elections, and could thus be struck off the member list for failure to participate. This might be implemented via two separate identifiers from the secret per your ideas. --=20 Robin Hugh Johnson Gentoo Linux: Dev, Infra Lead, Foundation Treasurer E-Mail : robbat2@gentoo.org GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85 GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136 --0k7NRaGPjSSxFfo/ Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: Robbat2 @ Orbis-Terrarum Networks - The text below is a digital signature. If it doesn't make any sense to you, ignore it. iQKTBAABCgB9FiEEveu2pS8Vb98xaNkRGTlfI8WIJsQFAl1NCXlfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEJE RUJCNkE1MkYxNTZGREYzMTY4RDkxMTE5Mzk1RjIzQzU4ODI2QzQACgkQGTlfI8WI JsTPPA/8CB9Vd1OR+/sxsdsDjdAOc5/3YU6iY6e5GGxSOMItTzEm75ursKirSysb XoE1au6LzUP57LwTFBy4MEOuWBNVmeGJqGedj5IhvzVWlHYFq5S+L3kV9HMbV1cb 15a9kuWELVesAfZ8DfCn/wx3IhMQU0wa1SQF1kzg2EXm0dXfaQkx0jdlqOmvq0ba pdnjodE5v6idcTM5yne2yZp6Y7d2ESN5Skb0jfILPBy2/AHbIxWCcvDbU0aIF/8W Z0iBmKdCryNmsEb33sOu6FGommRM9DEr0964f15xK4Xf/UktZV0NthtYjjq6Rv4O yGugxvVIs/vgb8EC6HXsBxP28XfJwop9aRvAaVAJQww2U1jWXxfAZVPixsPfkpgP jeXx93HOBy4Xy4LypWa+QqBpXzQZbOSCt7LSYoWQRjzepDJNaIsH7PShYAd6Pfnx 1bdTjeGOXKfXookjmpQTFsBAVF5xcDgPxGrWIm4QelxgPYxzFu+IBaTiJxWe2j4c k2VNcYSIEo64F05p46Qtymw4b2iDaSTMYJDbHRRmjdiE8JGgBEdnkptW1lnZQR9O 3L+tIpmzqiF2zTJNl44aoT7KIHkKG5LVFePcYs5h7xf2Z4c9btBEwPONo2gKLT7+ 2GwHIR1DdDzoISPMFsgaWXTGFOGMWlRPLW3XGmccbsRY2XEIiCs= =dDqK -----END PGP SIGNATURE----- --0k7NRaGPjSSxFfo/--