You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Today, to verify your vote, you have to go to the ballot box page and upload your voting proof, a QR code that hides a JWT. It would be neat if the QR code would be a url with the JWT already appended to it so that, by scanning the QR code, the user would automatically come to a page that verifies its vote. This page would be different than the ballot box page so that one could verify his vote even if the voting process is not over yet.
The text was updated successfully, but these errors were encountered:
The proof of vote is a JWT. It is signed but not encrypted. It is so on purpose so that the user can check the very content of the proof of vote if needed : the user can actually check that the content of the proof of vote matches with the vote he just made.
But using an URL will encourage people to use a QR code app to scan it. And those apps might be logging what the user scans: they could store/log the proof of vote and jeopardize the user's privacy.
In the other hand, we have no control on what the users will do with their proof of vote QR code... they will probably still try to scan it with a 3rd party app. More than simply not supporting it, maybe we should discourage it with a warning.
Today, to verify your vote, you have to go to the ballot box page and upload your voting proof, a QR code that hides a JWT. It would be neat if the QR code would be a url with the JWT already appended to it so that, by scanning the QR code, the user would automatically come to a page that verifies its vote. This page would be different than the ballot box page so that one could verify his vote even if the voting process is not over yet.
The text was updated successfully, but these errors were encountered: