Public SourceMage Discussion List

[Andrew <afrayedknot AT thefrayedknot.armory.com>]

On Wed, Jan 04, 2006 at 09:29:13PM +0100, Andrew ruskie Levstik wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Jeremy Blosser (emrys) wrote :
> 
> >
> > However, I'm not in favor of moving voting to the web sites.  It's a whole
> > lot easier to audit an emailed vote.  If it's in drupal we have to be able
> > to audit the vote from the browser to the web server to the database to
> > some external record.  Even if we use SSL between the user and the web
> > site, once submitted anyone with access to the web server or drupal's
> > components or the database can change it.  The best way to do verification
> > end-to-end would still be to have developers sign their votes before
> > injecting them into the system.
> > 
> 
> I'm against web voting as well...

Me too.

-Andrew

-- 
_________________________________________________________________________
| Andrew D. Stitt  | acedit at armory.com    | astitt at sourcemage.org | 
| irc: afrayedknot | Sorcery Team Lead       |      ftp://t.armory.com/ |
| 1024D/D39B096C   | 76E4 728A 04EE 62B2 A09A 96D7 4D9E 239B D39B 096C  |
-------------------------------------------------------------------------

Attachment: pgpRVAND7wS3P.pgp
Description: PGP signature