Sharing is caring! Building trust in a system through transparency: lessons from Swiss Post E-Voting
summary
Swiss Post publishes source code, protocol specs and architecture docs, enforces code conventions, strict PR reviews and static analysis with Sonar, CodeQL and dependency-check, and requires reproducible compilation and hash-verified artifacts to enable a trusted build and a trusted deployment ceremony. Mandatory independent audits and public intrusion tests gate production; a 2023 production trial runs in four cantons with about 20,000 voters. A bug bounty (top reward €230,000) returns 624 reports overall, with few confirmed exploitable issues.
AI-written summary · about
chapters (8)
- 0:00Swiss Post E-Voting intro
- 1:18Why transparency matters
- 3:06Publication process & code standards
- 7:43Public scrutiny & bug bounties
- 10:53Mandatory audits & expert feedback
- 12:19Trusted builds & deployments
- 15:11How to contribute & verify
- 16:13Q&A on hosting & security
related talks
21mBuilding trust in a system through transparency: lessons from Swiss Post E-Voting system
51mBuilders and Breakers: Partnering for Secure Elections
22mBuilding a Voting Machine Everyone Can Trust
12mIncreasing security without decreasing usability: A comparison of various verifiable...
45mFrom Ballots to Code: Exploring Election Security
09mWhy We Need Open Source Electronic ...
35mFreeing the software that runs our elections
58mKeynote: Who cares about Democracy?