On Sun, 2003-04-13 at 12:32, J-F C. (Jefsey) Morfin wrote:
> No. This is the basis of the simplest system I propose. The only
> control against fraudluent additional is a published list of the voters
> IDs that can be checked by everyone.
That still doesn't help, Jefsey. If I impersonate 12 different people,
there's still no way to prove it. There are hints at detection: the
Received: email headers might point out a single IP. Apache logs IPs.
But I could always impersonate each person saying we were on a community
access point behind an IP. Or disconnect/reconnect to get different IPs
every time. Or use a tricky SMTP and/or SSL set-up to hide my origin.