Belenios: Verifiable online voting system
A verifiable online voting system called Belenios prompts broad debate over whether end‑to‑end cryptographic verification can ever match the legitimacy and robustness of paper ballots. Commenters weigh technical merits such as individual vote tracking, threshold decryption, and E2E proofs against social requirements like trust, simplicity, and resistance to coercion or vote‑selling, especially in high‑stakes national elections. Many see a role for such systems in low‑impact or private elections, but argue that in‑person paper voting with transparent local counting remains safer and more publicly comprehensible for governmental contests.
Role of Verifiability vs. Trust
- Many commenters argue elections are ultimately about public trust, not just mathematical verifiability.
- Simple, observable paper processes are seen as easier for ordinary people to understand and therefore trust.
- Others counter that verifiability is more fundamental: a system that can be independently checked (even if not widely understood) is safer than a “trusted” but potentially compromised one.
- Concern: relying on “experts” to vouch for complex crypto systems may fail in an era of low institutional trust.
Paper vs. Electronic / Online Voting
- Strong camp: in‑person paper ballots, locally counted with observers, remain the most tamper‑resistant and socially robust, especially for high‑stakes national elections.
- Arguments for paper: decentralization, difficulty of large‑scale fraud, transparency of the process, ease for laypeople to monitor.
- Arguments for e‑voting: convenience, higher participation (esp. younger/remote voters), accessibility for disabled voters, potential for frequent or low‑stakes votes.
- Many see online voting as fundamentally unsafe: client machines, servers, and networks cannot be fully trusted, and centralization enables large‑scale manipulation.
Coercion, Vote‑Buying, and “No‑Receipt”
- Major unresolved problem: allowing individuals to verify their vote while preventing them from proving it to coercers or buyers.
- Mail‑in and remote voting are criticized for enabling family pressure and organized coercion; others note similar issues exist already with paper.
- Some schemes propose revoting, dummy ballots, or “deniable” tracking numbers, but commenters point out practical attack vectors (video, apps, social pressure).
Identity, Eligibility, and Sybil‑Resistance
- Belenios focuses on verifiable tallying; commenters highlight that deciding who may vote and authenticating them is a separate, hard problem.
- National e‑ID–based systems are proposed, but critics note governments could create fake IDs or fail to clean voter rolls.
- Auditing voter registries is complicated by privacy laws and limited public access.
Views on Belenios and E2E Systems
- Belenios is praised as a serious end‑to‑end verifiable design, with open source code.
- Critiques: complex usability, difficult threshold decryption ceremonies, and reliance on infrastructure/parties whose independence is hard to assess.
- Several emphasize it may be suitable for organizational or low‑stakes elections, but not for high‑stakes national votes.