Building trust in a system through transparency: lessons from Swiss Post E-Voting system
summary
Swiss Post e‑voting publishes all source code and protocol docs, enforces strict code conventions, two‑approval PRs and cryptographic reviews, and runs Sonar, CodeQL and OWASP dependency checks; four cantons run the system and 26,000 voters used it last election. Releases are reproducible and artifacts are hashed for verification, followed by a physical trusted deployment ceremony where experts compare hashes. Regular mandatory audits by the Federal Chancellery cover crypto, software, infrastructure and intrusion tests, and a global bug bounty (up to €230,000, average €2,000) drives external scrutiny.
AI-written summary · about
chapters (8)
- 0:00Swiss Post e-Voting intro
- 1:58Why transparency matters
- 4:47Publishing secure code
- 7:37Public scrutiny benefits
- 10:51Mandatory expert audits
- 12:57Trusted builds and deployments
- 16:11How to contribute
- 16:55Q&A
related talks
20mSharing is caring! Building trust in a system through transparency: lessons from Swiss Post E-Voting
09mWhy We Need Open Source Electronic ...
12mIncreasing security without decreasing usability: A comparison of various verifiable...
35mFreeing the software that runs our elections
22mBuilding a Voting Machine Everyone Can Trust
45mFrom Ballots to Code: Exploring Election Security
20mVerifiable Elections—Now Is the Time
48mElection Security The post pandemic acceleration of secure web based voting