My ideal voting system would allow me to have a real time feed of votes as they come in, so that at the end of the night I can check my records vs the "official" records. Names can be detached, all I need is a Ballot id. BallotId can be something as simple as the hash of RegisteredVoterId + password + Salt + ElectionId.
As long as the voter remembers their password, they can look up their record, and the record can be a fully public record with anominity.
Your ideal voting system is vulnerable to coercion ("log in and show me who you voted for or else") and phishing.
Voting systems should provide confidence to voters that votes are counted correctly, but not permit anyone, including the voters themselves, to learn how they voted after the ballot is cast.
how does the current system, or any voting system, prevent coercion? If there's a gun to your head, or some other ultimatum, it seems far too late to be worrying about your vote being shared. Even if votes aren't all logged, you can still be tortured for the answer. I would much rather the country have an individual coercion problem than a mass voting fraud problem.
"Voting systems should [...] not permit anyone, including the voters themselves, to learn how they voted" What could possibly be the benefit of that?
> how does the current system, or any voting system, prevent coercion?
By only allowing you alone into the voting booth, not allowing you to show your ballot to anyone, collecting the ballots in a sealed ballot box that's located in public that anonymizes the votes
> Even if votes aren't all logged, you can still be tortured for the answer.
No, you can't if there is no way for you to prove how you voted.
> I would much rather the country have an individual coercion problem than a mass voting fraud problem.
Why would one have anything to do with the other?
Also, one way to keep a country free from individual coercion problems is by having a reliable election process.
Ok, you put a gun to my head and tell me to vote for Hillary. I go into the ballot box and vote for Trump. I come out and you ask me if I voted Hillary. I say yes, I voted for Hillary, of course.
If there is no possible way for you or me to know (edit: prove) if I'm telling the truth, how is that worth your time and energy? It's not.
The benefit of a secret ballot is that it greatly reduces, if not removes, the incentive for coercion.
computers enable easy mass voter fraud... so we need to stay with paper ballot or we need a way to see if our vote is in the total number of votes, coercion aside...
1. Mobster goes in to vote but doesn't put it in the box - he takes the blank ballot paper outside with him.
2. He fills the vote on the ballot and gives it to the coerced voter 1. He expects a blank ballot back, or else. He has his goons watching the voter throw the real ballot in the box, or else.
3. Using the new blank ballot he goes to coerced voter 2, and the cycle continues.
By having dozens of people watching everything except the actual marking of the ballot. Scrutineers are highly motivated: they want to catch the other candidate cheating.
I've been a scrutineer in a polling room. I could watch and challenge anything except the marking of a ballot. And I did. So did other scrutineers. The odds of the mobster keeping a rotating scheme without detection approach zero with great rapidity, especially since staying in the ballot after casting your vote is not permitted.
If you really want a secret voting system such that the voter can’t access their own history, then just do not offer the password option. Instead a unique private key is generated, but never distributed to the voter or any other party.
However, I’d personally prefer a system that was fully public. Problems: Social Pressure, Violent/Non-Violent Coercion, Retaliation.
Coercion could be a problem but with enough humans seems unlikely to be effective without the details of the conspiring entity to leak. If here are 10 jurors or a few judges coercion matters because it is easy to cover up. Coercion at scale has never occurred. Coercing any double digit percentage of 300 MM voters through violence or bribes or etc will leak based on the law of large numbers. Conspiracies stop being theories when they are validated by thousands/millions of people.
Social pressure is a bit trickier. It does force any minority voice to reconsider their vote. However, this isn’t different from most of history where a violent or non-violent revolution occurs. Most people lie about their opinion officially but build consensus privately. Until a point where the scale tips and both opinions are appropriate and debatable.
Retaliation is the biggest issue. But we already have some pretty good laws in place around discrimination based on politics. We can improve those, but also as a society we need to get better at debate without retaliation and hiding opinions doesn’t help that societal improvement.
Laws can prevent coercion, at least by major businesses, but another concern is people selling their votes on a black market. Still, to me, the benefits of an open and verifiable voting system would outweigh the downsides.
I'll take a paper ballot system with electronic counting, thus something that can be verified, over something that leaves people afraid to vote because it's no longer truly anonymous.
I've been around too many women in abusive relationships to feel comfortable with that approach.
A simple secret ballot by paper is both open (anyone can observe the ballot casting and counting) and verifiable (the vote count can be repeated to confirm the totals).
Voters don't need to be able to verify their vote post-election because a) they cast their ballot, so they can just remember who they voted for, and b) they can't change their decision, so there is no need to have a record of it.
Fair enough, this idea came to me before 2016. Post 2016, in this world where people are ready to commit violence purely based off their judgement of your political beliefs, this is a legitimate concern.
Generally all mail in voting systems let you override your vote. If someone coerces you once and you send in another ballot postmarked after the first or go to your polling location in person on election day you can override that vote.
You basically need to hold someone hostage or under total surveillance from when the ballot is mailed to when the polls are closed to avoid them just sending in their actual ballot afterwards.
With an electronic voting system the window of time you have to hold someone hostage is much shorter - simply force their vote an hour before the polls close and then hold them prisoner for the hour.
At least here in Denmark mail voting does not just mean that you send your vote by mail.
It means that you before the voting date go to a public office, a consulate in a foreign country, etc., show you ID, go into a voting booth and votes, and they put you vote into an envelope, that is sealed and mailed to voting place.
Or that two appointed volunteers goes to e.g., a assisted living facility and witness residents voting and placing their vote in a envelope that is then sealed and mailed to a voting place.
When thinking about voting by mail I wouldn't consider North Carolina's system as exemplar, since it is still primarily a polling-place election. Instead, look towards Washington, Oregon, and Colorado which are states where elections are entirely by mail. Evidence of coercion or fraud is low, and engagement is high.
How do we know how many spouses are (or simply feel) compelled to vote a certain way?
I’m not saying fraud is rampant, but there’s no denying the fact that on the individual level fraud and coercion are much easier to achieve when voting is done outside the polling booth.
In many states it is possible to get an absentee ballot for any reason, which allows the same coersion potential but without the convenience of full vote by mail. Forcing voting in person also has a large effect on who actually votes (due to work or other issues getting in the way, which could also include coersion from a spouse who thought you might vote the wrong way or doesn't think you should be able to vote). Presumably people are checking if there are large swings in voting patterns when vote by mail is started that would indicate widespread coersion. Coersion can also be effective in practice even when the actual voting is done in secret.
I wouldn't recommend vote by mail for Mexico, where there is widespread vote buying even with secret ballots, but for the US it seems to me that vote by mail is likely to be more representative and increase the chance that voters will research the candidates as they are voting. No system is perfect so it is a question of what tradeoffs seem to make the most sense for particular situations.
The problem with any voting system that allows you to verify the vote after the fact is that it makes it too easy to coerce someone to vote a certain way.
I can promise you money (or threaten you with violence) to vote a certain way, but you can't follow me into the booth, and no matter how you make me "verify" I can always change the vote between verification and depositing it in the box.
If there is a way to verify after, then I can withhold payment until you verify your vote, or hurt you after I've seen your vote isn't what I wanted. By not allowing after the fact verification, it means that can't happen, and greatly reduces coerced votes.
So as cool as it would be to verify my vote after the fact, it has too many unintended consequences.
Using 'something you know' it's possible to both verify how your vote went and at the same time not allow someone else to know, even if forced.
A simple example would be assigning a random color to each option per person. So blue means Trump for you. Hilary for someone else.
You only need to get people into a booth once, to learn which color is which option.
From there on in, verification is as simple as looking at the color to make sure it's correct. No one else can be sure what the color means.
Same principle can be done on multiple votes, though information will leak. So if you're coerced more than once you'd need to regenerate your colors. So while this solution stops the 'violence' coercion it won't stop 'sale' coercion.
Also the other problem is people will write their colors down or forget them - which is why as you say verification after the fact causes way too many problems.
A feature/detriment of per vote verification is that it opens up the entire system to vote buying - are you describing verifying that your vote happened, or who it was cast for?
Not necessarily. Systems that allow you to verify that your vote was included and counted toward the candidate you selected in the booth, but do not allow you to prove to a third party who you voted for, are known, such as Scantegrity [1].
It sounds like the new system has this feature, and also another key feature of Scantegrity which is that the tallying can be done publicly and independently verified. From the article:
> The optical-scan system will print a receipt with a cryptographic representation of the voter’s choices. After the election, the cryptographic values for all ballots will be published on a web site, where voters can verify that their ballot and votes are among them.
> “That receipt does not permit you to prove anything about how you voted, but does permit you to prove that the system accurately captured your intent and your vote is in the final tally,” Kiniry said.
> Members of the public will also be able to use the cryptographic values to independently tally the votes to verify the election results so that tabulating the votes isn't a closed process solely in the hands of election officials.
> “Any organization [interested in verifying the election results] that hires a moderately smart software engineer [can] write their own tabulator,” Kiniry said. “We fully expect that Common Cause, League of Women Voters and the [political parties] will all have their own tabulators and verifiers.”
In addition to the issues of vote buying described in other comments, you’re also amplifying the spoiler effect to a massive degree with a real time vote feed.
Anyone in later time zones will be less incentivized to vote if they can see the results of all the votes that came before them.
IMHO even exit polling should be outlawed. This day-long televised circus during elections is really damaging to democracy...
I saw value in being able to confirm the public record matches what you did in the booth.
When you vote there would be a record of the registration Id voted for this particular election id. Information that you voted is already available... so this component is not a change to the system really.
As long as the voter remembers their password, they can look up their record, and the record can be a fully public record with anominity.