-
Notifications
You must be signed in to change notification settings - Fork 0
Description
Currently, you can scan the QR codes on your ballot and voting key with your smartphone, thus publishing your secret key, because the key string is published by default in a Google search (or whatever you use as your default in your browser). This means nothing is secret anymore, which could significantly damage our credibility.
Through the verification process, we are already training users to scan a QR code, but now they should definitely not do this when voting. Therefore, the following suggestion (originated from a discussion in the Daily In):
The QR code redirects to an opnVote URL where I can access the ballot or voting key, instead of just containing the string.
Important: election key and ballot paper information must be presented in the anchor part of the URL, so we can garuantee, that this secret information stays on the client side in the browser.