Gentoo Archives: gentoo-project

From: Aaron Bauman <bman@g.o>
To: gentoo-project@l.g.o
Subject: Re: [gentoo-project] [pre-GLEP] Secrecy-respecting voting mechanism for Gentoo projects
Date: Sat, 28 Aug 2021 19:01:44
Message-Id: YSqIEXE3bttIOLKv@Aaron-Baumans-MacBook-Pro.local
In Reply to: [gentoo-project] [pre-GLEP] Secrecy-respecting voting mechanism for Gentoo projects by "Michał Górny"
1 On Sat, Aug 28, 2021 at 12:30:15PM +0200, Michał Górny wrote:
2 > Hi,
3 >
4 > Please review the following pre-GLEP.
5 >
6 > ---
7 > GLEP: 9999
8 > Title: Secrecy-respecting voting mechanism for Gentoo projects
9 > Author: Michał Górny <mgorny@g.o>
10 > Type: Standards Track
11 > Status: Draft
12 > Version: 1
13 > Created: 2021-08-27
14 > Last-Modified: 2021-08-27
15 > Post-History: 2021-08-27
16 > Content-Type: text/x-rst
17 > ---
18 >
19 > Abstract
20 > ========
21 >
22 > A new voting system is devised with the aim of providing a single voting
23 > system for all Gentoo elections and votes. Automation is used to
24 > eliminate the human bottleneck in processing the elections. Votes are
25 > submitted via random identifers, and the identifiers are sent to voters
26 > via encrypted e-mail to protect the vote secrecy. E-mail is used to
27 > enable non-developer voters to participate.
28 >
29 >
30 > Motivation
31 > ==========
32 >
33 > The votify/countify tooling used to run Gentoo elections dates back
34 > to 2005. While it still serves it purpose, it has grown antiquated
35 > and is facing a few problems that are discouraging the developers from
36 > using it. These are:
37 >
38 > The problems with the current tooling include:
39 >
40 > 1. The elections require a lot of manual setup and attention. This is
41 > causing noticeable delays and can raise doubts about the validity
42 > of elections. For example, voters can still submit or modify votes
43 > after the deadline until the infra official collects them.
44 >
45
46 Given what we have seen in the security election this year, what
47 determines *who* can start an election? Maybe some clarity in GLEP 39?
48
49 > At this point, votify is practically used only for the Council
50 > and Trustee elections. The late attempts of using it for the Base
51 > System and Security project elections have resulted in a lot of
52 > frustration from the developers participating. The vast majority of
53 > project elections are currently run using third-party services or plain
54 > mail votes.
55 >
56
57 I am not aware of anyone from the security team having issues with
58 this... would you please expound on the issues of use?
59
60 -Aaron

Replies