> You can have e-voting systems that protect ballot secrecy and are verifiable.
In these systems the voter cannot verify that their vote was secret as they cannot understand, and much less verify the voting machine.
> And you can do that without providing proof of who any particular voter voted for.
Which is good for preventing the sale of votes, but keeps things obscure in a magical and correct box.
How can I tell the machine didn't alter my vote if it cannot tell me, and just me, who I voted for? The global sanity checks are worthless if the machine changed my vote as I entered it.
In these systems the voter cannot verify that their vote was secret as they cannot understand, and much less verify the voting machine.
> And you can do that without providing proof of who any particular voter voted for.
Which is good for preventing the sale of votes, but keeps things obscure in a magical and correct box.
How can I tell the machine didn't alter my vote if it cannot tell me, and just me, who I voted for? The global sanity checks are worthless if the machine changed my vote as I entered it.