Public SourceMage Discussion List

[David Kowis <dkowis AT shlrm.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jeremy Blosser (emrys) wrote:
> However, I'm not in favor of moving voting to the web sites.  It's a whole
> lot easier to audit an emailed vote.  If it's in drupal we have to be able
> to audit the vote from the browser to the web server to the database to
> some external record.  Even if we use SSL between the user and the web
> site, once submitted anyone with access to the web server or drupal's
> components or the database can change it.  The best way to do verification
> end-to-end would still be to have developers sign their votes before
> injecting them into the system.
> 

I too am not in favor of putting the votes on the website. I don't feel
that it's difficult to generate a gnupg key and use it, even if it's
explicitly for the purpose only for Source Mage voting. It's not like it
costs any money to do ;)

- --
David Kowis

ISO Team Lead - www.sourcemage.org
SourceMage GNU/Linux

Progress isn't made by early risers. It's made by lazy men trying to
find easier ways to do something.
  - Robert Heinlein

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)

iD8DBQFDvGLXtgErhgxHMHsRAsbAAKCCH94TJQ2VEv7e4JvERuk3MHOZKACfWrIo
6ShAhL+9gVmji/meDat1pSU=
=IcuP
-----END PGP SIGNATURE-----