#21: Anonymize datasets
--------------------------+-------------------------------------------------
Reporter: nigelj | Owner: nigelj
Type: enhancement | Status: assigned
Priority: major | Milestone: Release 0.2.0
Component: General | Version: 0.1.5
Resolution: | Keywords:
--------------------------+-------------------------------------------------
Comment (by pfrields):
I don't think we can promise 100% anonymity, and I don't think there's
sufficient support (or justification) to just deliver a dump of the DB
data to anyone. By disconnecting the user ID's from the votes, we at
least make it possible for any community member to potentially validate
the vote totals.
As for changing votes after the fact -- no electoral system I know of
supports changing your mind later. That opens the door to all sorts of
havoc. We already provide a confirmation screen for voting that should
serve to allay concerns about voter error, and IIRC a screen that confirms
the vote once cast, which could be printed. We could include language on
the screen that encourages it, too -- and since it's a HTTPS connection,
couldn't we let the voter know their Vote ID, so the voter's the only
person who knows the userID <-> voteID connection? (This is seriously
treading into separate ticket waters, I know.)
--
Ticket URL: <
https://fedorahosted.org/elections/ticket/21#comment:4>
Fedora Elections <
https://fedorahosted.org/elections/>
Fedora Elections