Re: Vote for the Debian Project Leader Election 2005
On Fri, Mar 25, 2005 at 03:52:42PM +1000, Anthony Towns wrote:
> Antti-Juhani Kaijanaho wrote:
> >On 20050325T002711+0100, Jeroen van Wolffelaar wrote:
> >>Eh, the buyer can demand proof, the same proof a voter has to verify his
> >>vote is tallied: ask the secret token.
> >Ouch. Nasty. Bad.
> >(This is one of the reasons why real elections have partisan observers
> >present in vote counting: you cannot give the voter proof of his vote
> >being counted, so you need another way to ensure public trust in the
> >process.)
>
> Yup; but conversely, we can't really manage that in Debian -- we'd have
> to have partisan observers monitoring the adminning of vote.debian.org's
> mail handling for three weeks, while at the same time not letting them
> see the non-anonymized votes.
Well, you have just to check the devotee code is doing what it is supposed to
do, and that this is the actual code running on the actual ballots, you don't
really need to look at the ballots. Since the devotee code is supposed to be
deterministic, and always produce the same result for a determined set of
votes independently of vote order and timing. If not we would have a serious
problem, which we supposedly solved duing the vote method discussion back then.
Friendly,
Sven Luther
Reply to: