{"id":37347,"date":"2023-06-19T05:50:58","date_gmt":"2023-06-19T09:50:58","guid":{"rendered":"https:\/\/www.kaspersky.com\/blog\/?post_type=emagazine&p=37347"},"modified":"2023-10-20T05:28:21","modified_gmt":"2023-10-20T09:28:21","slug":"online-voting-digital-democracy","status":"publish","type":"emagazine","link":"https:\/\/www.kaspersky.com\/blog\/secure-futures-magazine\/online-voting-digital-democracy\/37347\/","title":{"rendered":"Is digital voting secure enough for national elections?"},"content":{"rendered":"

With rising prices leading to political instability<\/a> and voter turnout down around the globe<\/a>, policymakers should also be asking how the can re-engage citizens in democracy.<\/p>\n

You\u2019ve probably not seen that question answered quite so cluelessly as my local council in the run-up to its 2019 election, by sticking giant poo emojis all over town<\/a>. Surprise \u2013 it didn\u2019t work. Voter turnout fell six percentage points on the previous election.<\/p>\n

Among the Facebook fury that called the poo emoji campaign tasteless and patronizing, a lone voice suggested another way to achieve the campaign\u2019s aim. \u201cI filled in my voting papers a couple of weeks ago, but it\u2019s sitting in its envelope still, ready to be posted. When I get the chance to swing by a post box, I will, but it\u2019s not something I do these days. Bring voting into the click-of-a-button digital world, and you will have voters.\u201d<\/p>\n

Could it possibly be that simple? Voter turnout is falling in almost every country \u2013 a trend that started around 1990<\/a>. When we\u2019ve fought life-and-death battles to vote, could inconvenience really put people off something so important? It\u2019s certainly plausible \u2013 \u00a0behavioral science shows small changes in environment can make a big difference to what people choose to do<\/a>.<\/p>\n

If the medium is the message, perhaps ways of voting that seem irrelevant and outdated may imply voting is irrelevant and outdated too.<\/p>\n<\/blockquote>\n

I asked democracy campaigners and commentators in several countries where they stand on digital voting. Do they think it will soon be feasible for national elections?<\/p>\n

Proportional representation may be fairer, but does it get us voting?<\/h2>\n

Josiah Mortimer of the UK Electoral Reform Society<\/a> dismisses digital voting entirely. \u201cThere are more pressing problems with the voting system than going to a polling station or getting a postal vote. Major privacy, accuracy and trust concerns have not been dealt with, and we feel the issue is a distraction from the real democratic crisis. The priority is ensuring every vote counts \u2013 in the UK by switching to proportional representation<\/a>, modernizing voter registration and improving citizenship education.\u201d<\/p>\n

Proportional representation describes any electoral system that ensures the proportion of representatives elected matches their party\u2019s share of the overall vote. That\u2019s distinct from non-proportional systems like first-past-the-post<\/a> or electoral college<\/a>, where winning certain areas can see a party less popular overall gaining power.<\/p>\n\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t

Secure Futures<\/p>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t

What's coming next?<\/span><\/h3>\n\t\t\t\t\t\t\t\t\t\t\t<\/header>\n\t\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t

Be first to find out what\u2019s happening in tech, leadership and cybersecurity.<\/p>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t

\n\t\t\t\t\tStay ahead<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/article>\n\t\t<\/div>\n\t\n

Proportional representation might make for fairer results, but could it reverse declining voter turnout?<\/a> After New Zealand adopted proportional representation in 1993, voter turnout fell for many years<\/a>, to an all-time low in 2011. Then, it started rising again<\/a>, with their October 2020 election seeing the highest turnout in many years<\/a>. Whatever drives New Zealand\u2019s election turn-out, there\u2019s more to it than proportional representation.<\/p>\n

For its \u201cprivacy, accuracy and trust\u201d concerns around digital voting, Electoral Reform Society pointed me to a 2015 article, Why we can\u2019t vote online<\/a>. It describes designing online systems that match the secrecy, accuracy and verifiability of paper as \u201cincredibly hard,\u201d referencing flaws found in Estonia\u2019s election system in 2014.<\/p>\n

The article\u2019s arguments may have been fair and accurate at the time, but what about today? Five years is a long time in technology, and in the number of eligible voters who expect to do everything digitally.<\/p>\n

Ballot secrecy is the heart of the issue<\/h2>\n

Lawrence Norden, Director for Election Reform and Democracy at the US\u2019s Brennan Center for Justice<\/a>,<\/u> often writes on security and electronic voting. He\u2019s optimistic online voting could one day be secure enough to rely upon, but cautions against \u2018too much, too soon\u2019. \u201cElection officials shouldn\u2019t be left on their own to figure out whether a system is secure and reliable. It is possible that one day, we can develop such a system. But currently, there are no generally accepted benchmarks to evaluate the security of online voting pilots.\u201d<\/p>\n

Norden places safeguarding electronic voting suppliers in his top two priorities. \u201cWe need a federal certification framework for election system vendors and their products. Hackers targeted vendors in 2016. We have little insight into vendors\u2019 internal cybersecurity practices, who works for them and who owns them. This is more of a security risk than we should be willing to accept.\u201d This makes sense, given supply chain attacks<\/a> are common.<\/p>\n

Norden thinks ballot secrecy is the big challenge for voting online. \u201cWhen we rely on software to provide us with election totals, as in the US, we must have a way to confirm the totals are accurate. The best way, while maintaining ballot secrecy, is to check the paper record against the electronic totals. There is no such record in paperless electronic machines or online ballots. If a hacker changes a vote transmitted over the internet, we might not know.\u201d<\/p>\n

Norden highlights voters can still do a lot to protect their vote from cyberattack. \u201cThey should check their voter registration online. They could volunteer to work on election day. They can learn the rules for how and when to vote early \u2013 the earlier people vote, the less chance a cyberattack can interfere with their ability to cast a ballot that will count.\u201d<\/p>\n

What does secure digital voting look like?<\/h2>\n

Dr. Muhammad Rizwan Asghar<\/a>, Senior Lecturer, School of Computer Science at the University of Auckland, is another frequent commentator on digital voting<\/a>. Does he think online voting could be secure enough to be the election standard sooner, later or never?<\/p>\n

\u201cOne might argue if Estonia can do online voting<\/a>,<\/u> any country can, but this might not be true. There have been reported vulnerabilities on the voter and voting server ends. Even if we assume there are no issues with existing online voting systems, Estonia is a tech-oriented country with a population of just 1.3 million.<\/p>\n

\u201cAddressing security risk for online voting means mitigating cybersecurity challenges at the user, communication and server levels. An online voting system needs a form of vote integrity, so votes can be tallied while ensuring voter privacy. Cryptographic schemes achieve this. Each voter encrypts her vote. Using a public bulletin board, voters can see the votes they cast. Once all the votes are cast, they\u2019re summed using homomorphic encryption<\/a>, then the final sum decrypted. The decryption key is split among a set of trusted authorities who must collaborate to reveal the final result. It\u2019s promising, but not enough on its own.<\/p>\n

Making online voting safe requires a safe cyber environment.<\/p>\n

Dr. Muhammad Rizwan Asghar, Senior Lecturer, School of Computer Science at the University of Auckland<\/p><\/cite><\/blockquote>\n

Some cybersecurity experts say there will never be anything safer than in-person voting with paper slips<\/a>, but Dr. Asghar points out, \u201cEach approach has its issues. In paper-based elections, people can be prevented from reaching polling booths. They can be harassed or coerced. A returning officer can spoil ballots. We can address most of these concerns using online voting. It could also make voting more accessible and help get results faster. But recent reports show voting servers are an attractive target for state-sponsored attackers. They can make servers unavailable using Denial of Service (DoS)<\/a> or Distributed DoS (DDoS)<\/a> attacks.\u201d<\/p>\n

What should any authority considering online voting learn from Estonia? \u201cEstonia has made their system\u2019s source code public to foster trust and minimize the potential attack surface. They have internet and computer training programs for voters. If a voter has been coerced, they can go back later and change their vote or even vote in person on election day.\u201d<\/p>\n

Despite his optimism for the future of online voting, Dr. Asghar says it\u2019s hard to imagine online voting being ready for national-level elections in the next few years. \u201cNot only is developing the system highly challenging, there must also be training in how to use it.\u201d<\/p>\n

\"Digital<\/p>\n

How will we come to trust digital voting?<\/h2>\n

British political philosopher Baroness Onora O\u2019Neill speaks in her lecture series, A Question of Trust, of how public institutions should aim, rather than to be trusted, to be <\/a>trustworthy<\/em><\/a>.<\/a> She argues it is being trustworthy that creates trust.<\/p>\n

The same may be true of electronic voting. For the public to trust it, it must prove itself trustworthy. Many of the risks of digital voting exist with paper-based voting and are as hard to detect in that setting. Secure, digital voting would offer voters protection paper cannot.<\/p>\n

The Brennan Center\u2019s Lawrence Norden makes sense when he says digital democracy shouldn\u2019t be rushed. But it seems high time to trial digital voting alongside existing options for lower-risk, local elections.<\/p>\n

In the face of plummeting voter engagement and global recession, the need to re-engage voters can\u2019t be put aside \u2013 trust in government depends on it. Policymakers must acknowledge technology has changed everything about how voters live. It must inevitably change how we vote.<\/p>\n","protected":false},"excerpt":{"rendered":"

As political engagement falls, technology keeps moving. Do recent digital voting innovations make it secure enough to bring the ballot box to voters?<\/p>\n","protected":false},"author":2552,"featured_media":37348,"template":"","coauthors":[3673],"class_list":{"0":"post-37347","1":"emagazine","2":"type-emagazine","3":"status-publish","4":"has-post-thumbnail","6":"emagazine-category-blockchain","7":"emagazine-category-opinions","8":"emagazine-category-tech-for-good","9":"emagazine-tag-democracy","10":"emagazine-tag-voting"},"hreflang":[{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/secure-futures-magazine\/online-voting-digital-democracy\/37347\/"},{"hreflang":"en-us","url":"https:\/\/usa.kaspersky.com\/blog\/secure-futures-magazine\/online-voting-digital-democracy\/23465\/"},{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/secure-futures-magazine\/online-voting-digital-democracy\/21652\/"}],"acf":[],"_links":{"self":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/emagazine\/37347","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/emagazine"}],"about":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/types\/emagazine"}],"author":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/users\/2552"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/media\/37348"}],"wp:attachment":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/media?parent=37347"}],"wp:term":[{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/coauthors?post=37347"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}