[InvaderFizz]

Which is what troubles me about making auditable digital voting systems. I'm not sure how you could do it while preserving the secret ballot.

About the best I can come up with is a QR code displayed on the screen and on a printout that you can compare with a third party phone app. Machine results are tabulated, and the QR code sheet is put in a lock box separately. This at least provides some way to compare what the computer says you voted versus the QR backup ballot for audits. I'm sure there are holes in my idea.

[gruez]

>About the best I can come up with is a QR code displayed on the screen and on a printout that you can compare with a third party phone app.

That's definitely not secret. If you can audit it on your phone, baddies can force you to show your phone to verify that you voted "correctly".

[InvaderFizz]

It's not, but I'm saying you have the option to compare the two with an outside reference at the time of voting. You keeping the result on your phone after would be entirely your decision.