- secrecy
- integrity
- verifiability (persuading those who doubt)
- availability
#kawaiicon
![](https://pbs.twimg.com/media/EHCp_tJVUAAyKvK.jpg)
![](https://pbs.twimg.com/media/EHCrVJcVUAAi7wu.jpg)
- turnout: but no evidence it helps
Turnout depends on people caring about the vote (eg Scottish independence, high turnout) #kawaiicon
![](https://pbs.twimg.com/media/EHCrzMfUYAMNL_7.jpg)
(If that’s happening, wouldn’t the same attackers target online voting too?)
Cost saving?
But online voting is expensive to run #kawaiicon
Seems pretty unlikely we'll lose the ability to send physical things across distances... #kawaiicon
#kawaiicon
![](https://pbs.twimg.com/media/EHCtRaKUEAAXZeo.jpg)
Certificate not controlled by their election authority.
Interesting mix of domains on the same certificate.
Users identifiable with a years-long persistent cookie
#kawaiicon
![](https://pbs.twimg.com/media/EHCuQMiU0AA9GfG.jpg)
![](https://pbs.twimg.com/media/EHCuQcjVUAAvwPh.jpg)
![](https://pbs.twimg.com/media/EHCuQcjVUAE8Ng3.jpg)
But use of cookies on the TLS proxy broke this separation
#kawaiicon
![](https://pbs.twimg.com/media/EHCu_05VUAAGrcT.jpg)
![](https://pbs.twimg.com/media/EHCu_06U0AAwP4R.jpg)
![](https://pbs.twimg.com/media/EHCu_1AU8AIrwO-.jpg)
But that reputation changed - we know they were breached!
NZ census also used inCapsula for the census
#kawaiicon
![](https://pbs.twimg.com/media/EHCvdfgUYAA0dVd.jpg)
Online voting systems are being built in ways that make basic mistakes, and repeat those mistakes year after year.
(The same principles apply to postal voting too)
#kawaiicon
![](https://pbs.twimg.com/media/EHCwOrHUEAA-LKw.jpg)
![](https://pbs.twimg.com/media/EHCwOrPUUAAsclx.jpg)