Why Not Scan?
Here's how I see it working:
- I go to the polling station, identify myself and am handed my voting slip.
- I place my voting slip into the e-voting machine and it prints a unique (and random), human readable identifier onto the slip and issues a receipt with the same identifier (which I compare).
- I mark my X or Xs as appropriate.
- I place my voting slip into the e-voting machine.
- The machine scans the slip and registers the vote.
- The voting slip is retained should manual counting be required.
- I go home and go on-line to the e-voting web site where I am prompted to enter, for example, the 3rd, 7th and 12th character of my identifier.
- The web site shows a list of the (n) matching identifiers, sorted by identifier, and their associated vote and I confirm that my vote is correct.
- Following the election results being ratified the full set of identifiers and votes is made available. The physical voting slips are all collected, without reference to their original location, sorted by identifier and filed.
There are things that might cause concern:
1. Is the slip marked in some way to link it to the identified voter?
2. Can the generated identifier be linked back to the voter in some way?
1. is already possible with manual paper ballots and 2. should be addressable.
Have I missed anything?