Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make the voting proof QR Code an url so that the user can verify his vote more easily #85

Open
thibauld opened this issue Oct 24, 2016 · 2 comments

Comments

@thibauld
Copy link

Today, to verify your vote, you have to go to the ballot box page and upload your voting proof, a QR code that hides a JWT. It would be neat if the QR code would be a url with the JWT already appended to it so that, by scanning the QR code, the user would automatically come to a page that verifies its vote. This page would be different than the ballot box page so that one could verify his vote even if the voting process is not over yet.

@JMLX42
Copy link
Owner

JMLX42 commented Oct 24, 2016

This page would be different than the ballot box page so that one could verify his vote even if the voting process is not over yet.

Please create a different issue for that.

@JMLX42
Copy link
Owner

JMLX42 commented Nov 2, 2016

The proof of vote is a JWT. It is signed but not encrypted. It is so on purpose so that the user can check the very content of the proof of vote if needed : the user can actually check that the content of the proof of vote matches with the vote he just made.

But using an URL will encourage people to use a QR code app to scan it. And those apps might be logging what the user scans: they could store/log the proof of vote and jeopardize the user's privacy.

In the other hand, we have no control on what the users will do with their proof of vote QR code... they will probably still try to scan it with a 3rd party app. More than simply not supporting it, maybe we should discourage it with a warning.

@JMLX42 JMLX42 added the question label Nov 2, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants