[ZF] re: electronic voting application

[Tres Seaver]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Rob Page wrote:
> 
> On Apr 6, 2006, at 10:35 AM, Tres Seaver wrote:
> 
>>
>> Hmmm, I wonder if we aren't over-engineering the problem here?
>>
>> What if we made it a requirement that all voting members of the
>> foundation submit (and keep current) their GPG/PGP public keys with
>> their application (fingerprint plus key server URL would do), and then
>> that they sign all vote e-mail with that signature?  The secretary  could
>> then compile a keyring (even make it downloadable from the ZF site!)
>> which could be used to validate voting e-mail.
>>
>> For board votes, this should be *way* more than sufficient (a dozen or
>> so members, voting by mail a dozen or so times per year).  The board
>> elections would be the only ones which had enough votes to make
>> remembering to check the signature at all tedious.
> 
> 
> We thought of this (really!  :^)
> 
> The worry was that getting PGP/GPG lashed up into your email client  is
> not trivial.  We'd like to think that the membership classes  outside of
> Committers will be populated by people with less technical  expertise.
> 
> Do you think that's an issue?

IT is trivial in Thunderbird, using the Enigmail plugin.  Jens just
recently figured out how to do it with the stock Mac mail client.
Googling "outlook pgp" and "outlook gpg" suggests that workable
solutions are available for those forced to use that client, e.g.:

  http://www.g10code.com/p-gpgol.html

Tres.
- --
===================================================================
Tres Seaver          +1 202-558-7113          tseaver at palladion.com
Palladion Software   "Excellence by Design"    http://palladion.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFENYmz+gerLs4ltQ4RAiduAJ98m0ROknzylTTSgeftcmabe9vQUwCgjeV2
xicA9Q82S+7WIHC25K33cYg=
=q7X7
-----END PGP SIGNATURE-----