https://bugzilla.wikimedia.org/show_bug.cgi?id=18978
Summary: Option to temporarily enter decryption key online
Product: MediaWiki extensions
Version: any
Platform: All
OS/Version: All
Status: NEW
Severity: enhancement
Priority: Normal
Component: SecurePoll
AssignedTo: [email protected]
ReportedBy: [email protected]
It might be desirable to configure the Tally Page so that the decryption key
could be entered online from there for use in a single tally run. If the key
is never stored to disk it mitigates against abuse/theft/etc. It also might
allow decryption to be done at SPI directly rather than on a separately
configured wiki (which is a quite cumbersome approach).
I suppose there is some small risk that someone could hack into SPI and be
there to capture the key, but if someone did that they could pretty much feed
in any number of bogus ballots to determine the elections. So if someone could
hack SPI we'd already have bigger things to worry about.
--
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
