Topical Discussions

The purpose of this TWiki page is to capture on-going topical discussions that can be used as a basis for exploring various Future VVSG considerations of current interest.

The information captured herein will, over time, be formalized across the groups as makes sense.

Commenters are encouraged to post:

  1. Their topical considerations; AND
  2. How they believe this can facilitate particular developments (requirements, principles, best practice guidance) for the Future VVSG.

Security vulnerabilities, need for Evidence-Based Elections, better voter registration protection

In late July of 2016, it became evident to a much broader segment of the public and the VVSG lists that the integrity of our elections is at risk. See e.g. By November, Russian hackers could target voting machines by security guru Bruce Schneier

A discussion ensued on a variety of VVSG lists. Points emphasized included:

  • We should require Evidence-Based Elections, rather than relying on certification alone, as elucidated by Stark and Wagner. This requires:
    • Voter-Verifiable Paper ballots and pervasive, effective and transparent manual audits of the paper ballots (at least until other Software Independent voting methods are well-vetted and easy-to-use)
    • Two-person chain-of-custody rules, tamper-evident seals, ballot accounting, and other procedural controls, along with compliance audits of these processes
  • Casting votes over the Internet is insecure, as is currently allowed in a variety of states under a variety of circumstances
  • We need better secure voter registration information, including sending postal mail to the previous address-of-record when voter registration information is changed, in case the change was unintentional or fraudulent.

Comments


Edit | Attach | Watch | Print version | History: r2 < r1 | Backlinks | Raw View | Raw edit | More topic actions
Topic revision: r2 - 2016-07-29 - NealMcBurnett
 
This site is powered by the TWiki collaboration platform Powered by PerlPLEASE NOTE: This wiki is a collaborative website. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. All the material on this website is in the public domain, including any text, diagrams, or images, unless indicated explicitly. Don't share anything on this site that you do not want to be public. Do not pass any proprietary documents or put any on the TWiki with implied public disclosure. If you do, it shall be deemed to have been disclosed on a non-confidential basis, without any restrictions on use by anyone, except that no valid copyright or patent right shall be deemed to have been waived by such disclosure. Certain commercial equipment, instruments, materials, systems, software, and trade names may be identified throughout this site in order to specify or identify technologies adequately. Such identification is not intended to imply recommendation or endorsement by NIST, nor is it intended to imply that the systems or products identified are necessarily the best available for the purpose. Any data provided on this site is for illustrative purposes only, and does not imply a validation of results by NIST. By selecting external links, you will be leaving NIST webspace. Links to other websites are provided because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose.