Chapter 49: Robustness and security

Voting is anonymous (that is, it represents a secret ballot).

The voting service runs on robust data processing centres, with fault tolerance, redundancy and backup. Vote counting is performed automatically, and results are available in real time. The platform must be impartial.

Voting must be tamper proof. The technology ensures a person contributes at most one vote on a given initiative. The voting service runs open source software - in other words the source code is in the public domain, and anyone can download the source code and study it. The software binaries have independently verifiable cryptographic hashes, making it possible for an independent watchdog to verify that the binaries were compiled from identified versions of source code.