Skip to content
This repository was archived by the owner on Sep 16, 2021. It is now read-only.

Make registration authority-specific or even election-specific #2

Open
andres-erbsen opened this issue Jul 5, 2013 · 0 comments
Open

Comments

@andres-erbsen
Copy link
Owner

A bad election authority could deliberately confuse multiple registration requests that differ in the LSAGS public key, thus creating a plausible explaination for not counting that user's vote. To avoid this,

  • authorities should be allowed to allow each user register only once
  • one authority must be unable to interpret a request to register with another authority as a request to register with them.

Fix: add the authority's public key fingerprint (or equivelent) to the registration request.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant