[ZF] re: electronic voting application

[Rob Page]

On Apr 6, 2006, at 10:35 AM, Tres Seaver wrote:
>
> Hmmm, I wonder if we aren't over-engineering the problem here?
>
> What if we made it a requirement that all voting members of the
> foundation submit (and keep current) their GPG/PGP public keys with
> their application (fingerprint plus key server URL would do), and then
> that they sign all vote e-mail with that signature?  The secretary  
> could
> then compile a keyring (even make it downloadable from the ZF site!)
> which could be used to validate voting e-mail.
>
> For board votes, this should be *way* more than sufficient (a dozen or
> so members, voting by mail a dozen or so times per year).  The board
> elections would be the only ones which had enough votes to make
> remembering to check the signature at all tedious.

We thought of this (really!  :^)

The worry was that getting PGP/GPG lashed up into your email client  
is not trivial.  We'd like to think that the membership classes  
outside of Committers will be populated by people with less technical  
expertise.

Do you think that's an issue?

--Rob

--
Rob Page               V: 540 361 1710
Zope Corporation       F: 703 995 0412