15+ years of Estonian public sector IT experience, former chief architect of the country here. AMA.
This source code being open is great, but it’s not the wole story. E-voting is deliberately designed to fit into the context of voting in general and into the societal context. Your paper vote always overrides your electronic vote and there’s provisions in the law allowing cancellation of electronic voting and immediately falling back to paper. In the societal context, electronic identity and signatures are ubiquitous, voting is the least it’s used for.
Thus, the question is not if the system the code implements is secure but if the whole thing is. Of course, if you find a security issue in the code, get in touch and your contribution will be welcomed. But please do not claim e-voting to be inherently insecure without an understanding of how it works on the ground and what happens around it. Happy to explain.
This source code being open is great, but it’s not the wole story. E-voting is deliberately designed to fit into the context of voting in general and into the societal context. Your paper vote always overrides your electronic vote and there’s provisions in the law allowing cancellation of electronic voting and immediately falling back to paper. In the societal context, electronic identity and signatures are ubiquitous, voting is the least it’s used for.
Thus, the question is not if the system the code implements is secure but if the whole thing is. Of course, if you find a security issue in the code, get in touch and your contribution will be welcomed. But please do not claim e-voting to be inherently insecure without an understanding of how it works on the ground and what happens around it. Happy to explain.