• Re: Ballot option 2 - Merely hide Identities of Developers Casting a Pa

    From Sam Hartman@21:1/5 to All on Thu Feb 24 00:30:01 2022
    "Judit" == Judit Foglszinger <urbec@riseup.net> writes:


    Judit> Give the opportunity to vote for secret voting without
    Judit> needing to additionally vote for unrelated/only slightly
    Judit> related constitution changes; for example for the change of
    Judit> mode of voting from email to something not defined.

    Even if you don't want to move toward some different voting system, do
    we really want to require a constitutional amendment if say the
    secretary wanted to move voting to a salsa-authenticated website to make
    it easier and more accessible to our members?
    Back when the constitution was passed, email was so obvious for this
    sort of thing that it wasn't a real limitation.

    Today, I think there are all sorts of reasons we might prefer a
    different way to interact with the voting system, and I don't want to
    need to change the constitution every time we want to make such a
    change.

    --Sam

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Scott Kitterman@21:1/5 to All on Thu Feb 24 00:30:01 2022
    Seconded/sponsored.

    Scott K

    On Wednesday, February 23, 2022 5:44:34 PM EST Judit Foglszinger wrote:
    I propose a ballot option for the GR
    "Hide Identities of Developers Casting a Particular Vote"
    that makes the following changes to the constitution.

    1) Do not make the identity of a voter casting a particular vote public.

    6) Codify that our election system must permit independent verification
    of the outcome given the votes cast and must permit developers to
    confirm their vote is included in the votes cast.

    So it's the proposed GR minus the changes
    not directly related to introducing secret votes.

    I ask for seconds aka sponsors for this Option.

    Rationale
    =========

    Give the opportunity to vote for secret voting without needing to additionally vote for unrelated/only slightly related
    constitution changes;
    for example for the change of mode of voting
    from email to something not defined.

    As it was mentioned in the discussion,
    there might be no consensus on which options are direcly related -
    This option regards the need to allow verification (6))
    as directly related to secret votes, because otherwise
    they would become completely unverifiable.

    Summary of Changes
    ==================

    1) Do not make the identity of a voter casting a particular vote
    public.

    6) Codify that our election system must permit independent verification
    of the outcome given the votes cast and must permit developers to
    confirm their vote is included in the votes cast.


    <h3>4.2. Procedure</h3>
    @@ -228,9 +246,10 @@ earlier can overrule everyone listed later.</cite></p>
    <p>
    Votes are taken by the Project Secretary. Votes, tallies, and
    results are not revealed during the voting period; after the
    vote the Project Secretary lists all the votes {+cast in sufficient detail that anyone may verify the outcome of the election from the votes cast. The+} {+ identity of a developer casting a particular vote is
    not made+} {+ public, but developers will be given an option to
    confirm their vote is included in the votes+} cast.

    @@ -371,8 +390,7 @@ earlier can overrule everyone listed later.</cite></p>
    necessary.</li>

    <li>The next two weeks are the polling period during which
    Developers may cast their votes. [-Votes in leadership elections are-]
    [- kept secret, even after the election is finished.</li>-]{+</li>+}


    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEE53Kb/76FQA/u7iOxeNfe+5rVmvEFAmIWwuIACgkQeNfe+5rV mvHjhg/9HyE5JUy6ZBjzjmrFiK09j8k2y9TDe/HwENCA0Ntafff+sxr7TsNtAEmq jZL0kkz8Iq7Lr0KJsAgcx+AyDC2cgCKzuqaRY1GU4PY4Sgw2VN/Z2NgM2Hukvh58 bubUTsEOScuoXx1EFGst5tdTB5ElWg5zYm2Ub+R4uEG26hDseebyb038zxg+U6i1 yIh3VewhcIsH/6cZNusKBaL0iJnhMlt4e3z6GAwfGOXBh46TPoWXimP+AeF9ff3C fHmD1fhGBsopm13l0q050+HXtNkMw2dP2He95tP1PVG1zx4caqdUi0IghZN+3V6P hEgKQZciaDtVnNxvnwv5ERT0Ga2SjBhRBjBrEtfq5q950vW4P4ftoYLnCZpRl3AP 2N0U88xmmsFL5YYpwgFGqDaUG11ez8ORwVYR0KoKJmN73w8U5X5BSH/YctKS7ps6 fjLP1QjBVh2ggJwbbIowA77Yd7JqLVfBYLlHuNcgg8uZsFAm36NJ2jl3SMHXVJ63 4swXaKO9N+3FKpDoJpzAlquzEgNcC4xDBBJx637si6XAJOqysNoWWHyM86vmfPfu DIvBkCa37xIBKzSpO9IH27sGUy7VCJ5lla2XMEUYT1ht+9y3e2TpEjBxh9Mns6iG GxsA/C+Rle9RiQWmj5iN5DMR7wlSCrTwtErOBWzRRXWCv/cH/iU=
    =Dfrz
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Martin Michlmayr@21:1/5 to All on Thu Feb 24 01:20:01 2022
    * Sam Hartman <hartmans@debian.org> [2022-02-23 16:22]:
    Even if you don't want to move toward some different voting system, do
    we really want to require a constitutional amendment if say the
    ...

    Sam, I haven't followed the discussion closely, but when I read your
    ballot I was *immediately* concerned about 3) and 4), which have
    nothing to do with hiding identities. In fact, if you look at the
    diff you posted, the biggest changes have nothing to do with the title
    of the vote. (If 3) and 4) are more important in hidden votes, that
    needs to be made clearer in the text.)

    After the "editorial changes" fiasco a few years ago, I'm not sure if
    it's a good idea to pack unrelated changes into a vote. Yes, maybe
    they are merely clarifications that everyone agrees with, but if so,
    why not have a simple follow-up vote later.

    Someone once said that if a Git commit message contains wording like
    "Also fix" it should have been two separate commits. That's how I
    feel about your proposal.

    --
    Martin Michlmayr
    https://www.cyrius.com/

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Sam Hartman@21:1/5 to All on Thu Feb 24 01:30:01 2022
    "Martin" == Martin Michlmayr <tbm@cyrius.com> writes:


    Yes, I think 3) and 4) are much more important in hidden votes.

    Even without 2, the constitution gives the secretary significant
    flexibility in how the voting system is set up.
    With hidden votes, several of us believe it is more likely that people
    could end up disagreeing with how the secretary decided to set things
    up.

    That's especially true if people in the project are considering pushing
    for some sort of anonymous voting scheme.
    It seems very likely we would want to debate those details,
    and leaving that to one person without recourse if we disagree is
    problematic.

    I think change 2 (not requiring email) makes the anonymous voting
    efforts easier but is not a strict requirement.

    So, if I were going to unbundle this, I'd first want to see changes 3)
    and 4) approved before I'd be comfortable voting for 1, 2 and 6.

    I'd definitely be interested in improvements to the rationale of my
    ballot option to better explain why changes 3-4 are something you
    probably want to approve before 1, 2 and 6.

    I absolutely agree that these changes would be split into multiple
    commits in a software project
    I think they would be one merge request though, and if I were the one
    approving the merging, I'd want 3-4 in the first merge request if it
    were split into two merge requests.

    -----BEGIN PGP SIGNATURE-----

    iHUEARYIAB0WIQSj2jRwbAdKzGY/4uAsbEw8qDeGdAUCYhbPYQAKCRAsbEw8qDeG dOfGAQCm/YIwGp30ocB9l5pgi0ilZ4M1qYIRE7XVfDYq6kUi2AEA3Nx9Btrr50TB /2m/Lm5hAs7hQ9GSCfPG7/tJpZdoRgc=
    =vxp6
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Gunnar Wolf@21:1/5 to All on Thu Feb 24 20:10:01 2022
    Sam Hartman dijo [Wed, Feb 23, 2022 at 05:20:49PM -0700]:
    "Martin" == Martin Michlmayr <tbm@cyrius.com> writes:

    Yes, I think 3) and 4) are much more important in hidden votes.

    If this is right, Sam, let me politely ask you to unbundle. Not only
    due to Martin's argument (the scar of "editorial changes" we all had
    to endure and understand a little too late), but also to keep each of
    the choices as simple and clear as possible -- and to avoid
    combinatorics. And even clarity!

    Say, now that Judit added a ballot option that works targets only one
    of your concerns (voter secrecy). This option does not consider 3 and
    4.

    Suppose no other options are present. Judit's option wins, yours is
    second, and NotA is third. A simplistic reading would mean, "merge
    Judit's proposed changes in the constitution". However, more people
    voted 3 and 4 above NotA -- Shouldn't they also be included? Do they
    warrant a separate GR now?

    Or should the GR have now four options? (Sam's original, Sam's minus 3
    and 4, Judit's original, and Judit's plus 3 and 4)

    I think change 2 (not requiring email) makes the anonymous voting
    efforts easier but is not a strict requirement.

    So, if I were going to unbundle this, I'd first want to see changes 3)
    and 4) approved before I'd be comfortable voting for 1, 2 and 6.

    I'd definitely be interested in improvements to the rationale of my
    ballot option to better explain why changes 3-4 are something you
    probably want to approve before 1, 2 and 6.

    I absolutely agree that these changes would be split into multiple
    commits in a software project
    I think they would be one merge request though, and if I were the one approving the merging, I'd want 3-4 in the first merge request if it
    were split into two merge requests.

    So... Yes, please -- do unbundle the changes in whichever way you see
    better. I understand your rationale, but as it is, it gets harder to
    parse for those of us who are not following 100% of the posts in
    d-vote in real time. I would feel the current discussion is mostly
    focused on the anonymous character of the votes; given there is
    momentum on this, my recommendation (which you are, of course, free to
    ignore as you have some real arguments behind!) is to amend your
    proposal dropping the 3 and 4 changes for a later stage, and continue
    the GR process as it is.

    Anyway -- Thanks for the _huge_ work and thought you are putting into
    making Debian's governance better and clearer!

    - Gunnar.

    -----BEGIN PGP SIGNATURE-----

    iHUEABYIAB0WIQRgswk9lhCOXLlxQu/i9jtDU/RZiQUCYhfWqgAKCRDi9jtDU/RZ iVyuAP4mYaET0aNTr0RnZqGaFGQOymbj6DImsBtNhV5lC9ZdsQD/WWiGPEru6+/J miRdp7q1fAS41K7OM/IQbxLLBOqRjgI=
    =rpPJ
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Gunnar Wolf@21:1/5 to All on Thu Feb 24 21:00:01 2022
    Russ Allbery dijo [Thu, Feb 24, 2022 at 11:17:10AM -0800]:
    Suppose no other options are present. Judit's option wins, yours is
    second, and NotA is third. A simplistic reading would mean, "merge
    Judit's proposed changes in the constitution". However, more people
    voted 3 and 4 above NotA -- Shouldn't they also be included? Do they warrant a separate GR now?

    OK, after reading a bit deeper, I find that Judit's changes are
    basically Sam's minus 3 and 4, so it translates to my example not
    being realistic... But anyway, my rationale for it allows for some
    imagination ;-) I wanted to point out that IMO bundling changes is
    best avoided.

    I believe that the combinatorics (putting each possible combination on the ballot) is the correct approach given our voting system and given the
    range of possible opinions.

    Right -- the voting system allows for this quite well. But it requires
    twisting each of the voters' minds around a set of sometimes
    convoluted changesets that might lead to fatigue. The practice of not
    bundling leads to simpler texts and easier evaluation and
    understanding by those not closely following the discussions.

    To see why, suppose there is a voter who is happy with private votes
    provided that the secretary decisions can be overridden, but if secretary decisions cannot be overridden, they do not want private votes. If the
    two votes are unbundled, that voter cannot vote their preference, and
    their only option is to either add a new ballot option on one of the votes
    to do both at once or vote both below NotA.

    If all three options (secretary changes only, private vote only, secretary changes plus private vote) are on the same ballot, that voter can then accurately vote their opinion by putting the last above NotA and the
    second below NotA. The point of using a clone-proof voting system is to allow us to capture preferences like that by feeling free to add
    additional options to the ballot.

    I completely agree with separating *unrelated* changes, but the whole
    point of this discussion is that some folks believe the changes are
    closely related, to the extent that one of the changes may not be
    desirable unless the other one is made at the same time.

    I think I get what you mean... I still cannot see the deep relation
    between the two, but I guess that requires me to spend more time in
    last week's threads than what I am willing to :-\

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Russ Allbery@21:1/5 to Gunnar Wolf on Thu Feb 24 20:20:02 2022
    Gunnar Wolf <gwolf@debian.org> writes:

    If this is right, Sam, let me politely ask you to unbundle. Not only due
    to Martin's argument (the scar of "editorial changes" we all had to
    endure and understand a little too late), but also to keep each of the choices as simple and clear as possible -- and to avoid
    combinatorics. And even clarity!

    Say, now that Judit added a ballot option that works targets only one of
    your concerns (voter secrecy). This option does not consider 3 and 4.

    Suppose no other options are present. Judit's option wins, yours is
    second, and NotA is third. A simplistic reading would mean, "merge
    Judit's proposed changes in the constitution". However, more people
    voted 3 and 4 above NotA -- Shouldn't they also be included? Do they
    warrant a separate GR now?

    Or should the GR have now four options? (Sam's original, Sam's minus 3
    and 4, Judit's original, and Judit's plus 3 and 4)

    I believe that the combinatorics (putting each possible combination on the ballot) is the correct approach given our voting system and given the
    range of possible opinions.

    To see why, suppose there is a voter who is happy with private votes
    provided that the secretary decisions can be overridden, but if secretary decisions cannot be overridden, they do not want private votes. If the
    two votes are unbundled, that voter cannot vote their preference, and
    their only option is to either add a new ballot option on one of the votes
    to do both at once or vote both below NotA.

    If all three options (secretary changes only, private vote only, secretary changes plus private vote) are on the same ballot, that voter can then accurately vote their opinion by putting the last above NotA and the
    second below NotA. The point of using a clone-proof voting system is to
    allow us to capture preferences like that by feeling free to add
    additional options to the ballot.

    I completely agree with separating *unrelated* changes, but the whole
    point of this discussion is that some folks believe the changes are
    closely related, to the extent that one of the changes may not be
    desirable unless the other one is made at the same time.

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Russ Allbery@21:1/5 to Gunnar Wolf on Thu Feb 24 21:40:01 2022
    Gunnar Wolf <gwolf@debian.org> writes:

    Right -- the voting system allows for this quite well. But it requires twisting each of the voters' minds around a set of sometimes convoluted changesets that might lead to fatigue. The practice of not bundling
    leads to simpler texts and easier evaluation and understanding by those
    not closely following the discussions.

    I agree in general. In the cases where bundling is necessary to include
    all the possible preferences, it's probably worth investing a bit of time
    into making a table of the options and which ballot option to vote for
    based on your preferences among those options.

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bdale Garbee@21:1/5 to Sam Hartman on Fri Feb 25 17:40:01 2022
    Sam Hartman <hartmans@debian.org> writes:

    Even if you don't want to move toward some different voting system, do
    we really want to require a constitutional amendment if say the
    secretary wanted to move voting to a salsa-authenticated website to make
    it easier and more accessible to our members?

    Yes.

    While I'm personally probably more worried about how calls for votes are disseminated than about how the voting mechanism itself works, the
    proposed change feels like a slippery slope towards the possibility that
    how voting happens becomes generally less well understood. Requiring a
    GR to change the mechanism seems like a completely reasonable way to
    both vet the proposed change, and ensure a maximum number of potential
    voters understand what's changing.

    Bdale

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEHguq2FwiMqGzzpLrtwRxBYMLn6EFAmIZBPkACgkQtwRxBYML n6El1w/8DQW/4o+HCyDCpDAoRBvQDt0Gs7pn7oay2KAEyvX0OVXA3A1nxkOuk827 LJ+RJYe+1giGC97UIiizsAHfgNVLtTStqB4TNddV/Plk7/jpDmVBXwAPO8K73dee XC+1ZHdaelqs/wg7I1ad3K1DddxcMgFdxzOA9YkNOrcucBSESEiFP3tqf/K4Dy5v 4S++oQF43fCLHo556Lit9pNhN1YIwTQjkAmvnVBbFFu2kniY22qOBeiKUQUtTd5n DsOcc/pE7Ov58gI8YRZUZXq3aRHuj2s7ulZfSxouT9Z6PyQLLXt0EGXOFgOpgv7I eUY2834GMgZXfUqYD246kBfxIKlm6FuSTScf9NUqaYkSAlaBDuiEHW46k7BsJPNz IWsyxeG8XmeWfWMTAryXm5Fa5YsHbQdHUaxzuD85RDokFGUtSf7tq7TI6vIieviT 7SRpObycT0iEt++AplH28OyRiFI7peu67MwblOZfz3xkqK/VYniArVXRPpFtTeWJ NkszUqiMDahfakTBVBlqtulP3UyVYKzKeS+V/Wtj5/rj5WjC+5/gqotl5zH0a03h dJ2BT2X13oqmHVIlOy2PyTMwQBHJ4nMlon9U/GPFynLd1DNN/MIdzQlp81ewJ7cO odZTriHndX3w/eiD4TdPrs4+CCCxrmtsouTGOSRr3LmajkVYNSw=
    =3Y0B
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Mathias Behrle@21:1/5 to Like others on Fri Feb 25 20:10:01 2022
    * Judit Foglszinger: " Ballot option 2 - Merely hide Identities of Developers
    Casting a Particular Vote and allow verification" (Thu, 24 Feb 2022 05:44:34
    +0700):


    I sponsor this option.

    Like others said: changing the vote system should be proposed in a
    separate GR.


    I propose a ballot option for the GR
    "Hide Identities of Developers Casting a Particular Vote"
    that makes the following changes to the constitution.

    1) Do not make the identity of a voter casting a particular vote public.

    6) Codify that our election system must permit independent verification
    of the outcome given the votes cast and must permit developers to
    confirm their vote is included in the votes cast.

    So it's the proposed GR minus the changes
    not directly related to introducing secret votes.

    I ask for seconds aka sponsors for this Option.

    Rationale
    =========

    Give the opportunity to vote for secret voting without needing to additionally vote for unrelated/only slightly related
    constitution changes;
    for example for the change of mode of voting
    from email to something not defined.

    As it was mentioned in the discussion,
    there might be no consensus on which options are direcly related -
    This option regards the need to allow verification (6))
    as directly related to secret votes, because otherwise
    they would become completely unverifiable.

    Summary of Changes
    ==================

    1) Do not make the identity of a voter casting a particular vote
    public.

    6) Codify that our election system must permit independent verification
    of the outcome given the votes cast and must permit developers to
    confirm their vote is included in the votes cast.


    <h3>4.2. Procedure</h3>
    @@ -228,9 +246,10 @@ earlier can overrule everyone listed later.</cite></p>
    <p>
    Votes are taken by the Project Secretary. Votes, tallies, and
    results are not revealed during the voting period; after the
    vote the Project Secretary lists all the votes {+cast in sufficient detail that anyone may verify the outcome of the election from the votes cast. The+} {+ identity of a developer casting a particular vote is not made+} {+ public, but developers will be given an option to confirm their vote is included in the votes+} cast.

    @@ -371,8 +390,7 @@ earlier can overrule everyone listed later.</cite></p>
    necessary.</li>

    <li>The next two weeks are the polling period during which
    Developers may cast their votes. [-Votes in leadership elections are-]
    [- kept secret, even after the election is finished.</li>-]{+</li>+}




    --

    Mathias Behrle
    PGP/GnuPG key availabable from any keyserver, ID: 0xD6D09BE48405BBF6
    AC29 7E5C 46B9 D0B6 1C71 7681 D6D0 9BE4 8405 BBF6

    -----BEGIN PGP SIGNATURE-----
    Comment: Signed by Mathias Behrle

    iQIzBAEBCgAdFiEErCl+XEa50LYccXaB1tCb5IQFu/YFAmIZJ90ACgkQ1tCb5IQF u/ZJWxAApz8wc6/EIlnkTrkp2ViazgFmmRlCrnIbGTzP0cAzKXTnwwGF5No+MvJE cv8iFKPGPjsXd6/T9P8iOGTnm3sji7Qfr2sJ2rPUGc91VsXYE8HkrizLRSdIojET n09gZwnx5FkA4iU2wG2j5KIzUo9NBBU1OoJfsZE+TsAnF43dV+csO4a9FMBXR12M 9BMovpq2jmdqM/X4X0FE+OkNiZ3NbQ44JXigb0Ac6zrB14pfcUnZSkyl7HnNucrq mYyV/yt6ZAIvMCCKSNdzYYkBpP/t2hPkMd9PzsZ3dRKzlg6kjXgclbDozitcuO/a a7hyHvuf6K869BwpkJi5qEQo6xOnGtzboBFBT+49NQIhxeAO8S1HysXOQzzd8l7m ZaCfziK8MdAuGTQjxx1R0+xagFDgkDvfC/WMxzA/jnrhBjvYUUj2UY0ZkU9BrBEh v/UMTvGJPSLOiMTIf3uapS0MWy0JW7ozbU2tQEZFfV2ISiIGM1icNxqkzOARSxVO 6Q/OZJqUs4wmCN4+yuMtrkqzubHp03/576wn9NQCJcdukf+l/by+eu+OSq6tR/NV Q559PQOUvbhc80L5cC4SjF2zZ+w2wCfC3yDEAnym3pgM2PXopPN/IZpGlio/O4+L RZZY0s93b7Gm5DpXs9IzjZulnxpOD/ckic6sUq4Yebseq/gQJAU=
    =eQXq
    -----END P
  • From =?UTF-8?Q?Louis-Philippe_V=c3=a9ron@21:1/5 to Judit Foglszinger on Fri Feb 25 20:00:01 2022
    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------4YV3L4EWXY9YpeEpTp7eeqvI
    Content-Type: text/plain; charset=UTF-8
    Content-Transfer-Encoding: quoted-printable

    On 2022-02-23 17 h 44, Judit Foglszinger wrote:
    I propose a ballot option for the GR
    "Hide Identities of Developers Casting a Particular Vote"
    that makes the following changes to the constitution.

    1) Do not make the identity of a voter casting a particular vote public.

    6) Codify that our election system must permit independent verification
    of the outcome given the votes cast and must permit developers to
    confirm their vote is included in the votes cast.

    So it's the proposed GR minus the changes
    not directly related to introducing secret votes.

    I ask for seconds aka sponsors for this Option.

    Rationale
    =========

    Give the opportunity to vote for secret voting without needing to additionally vote for unrelated/only slightly related
    constitution changes;
    for example for the change of mode of voting
    from email to something not defined.

    As it was mentioned in the discussion,
    there might be no consensus on which options are direcly related -
    This option regards the need to allow verification (6))
    as directly related to secret votes, because otherwise
    they would become completely unverifiable.

    Summary of Changes
    ==================

    1) Do not make the identity of a voter casting a particular vote
    public.

    6) Codify that our election system must permit independent verification
    of the outcome given the votes cast and must permit developers to
    confirm their vote is included in the votes cast.


    <h3>4.2. Procedure</h3>
    @@ -228,9 +246,10 @@ earlier can overrule everyone listed later.</cite></p>
    <p>
    Votes are taken by the Project Secretary. Votes, tallies, and
    results are not revealed during the voting period; after the
    vote the Project Secretary lists all the votes {+cast in sufficient detail that anyone may verify the outcome of the election from the votes cast. The+}
    {+ identity of a developer casting a particular vote is not made+}
    {+ public, but developers will be given an option to confirm their vote is included in the votes+} cast.

    @@ -371,8 +390,7 @@ earlier can overrule everyone listed later.</cite></p>
    necessary.</li>

    <li>The next two weeks are the polling period during which
    Developers may cast their votes. [-Votes in leadership elections are-]
    [- kept secret, even after the election is finished.</li>-]{+</li>+}


    I sponsor this option.

    As I said before, I think changing the way we vote (not by email) should
    be done separately and shouldn't be bundled in this GR.

    Thanks!

    --
    ⢀⣴⠾⠻⢶⣦⠀
    ⣾⠁⢠⠒⠀⣿⡁ Louis-Philippe Véronneau
    ⢿⡄⠘⠷⠚⠋ pollo@debian.org / veronneau.org
    ⠈⠳⣄

    --------------4YV3L4EWXY9YpeEpTp7eeqvI--

    -----BEGIN PGP SIGNATURE-----

    iHUEARYKAB0WIQTKp0AHB6gWsCAvw830JXpQshz6hQUCYhkk0gAKCRD0JXpQshz6 hSSyAQDYWMV6XVD2m6D8a0hJEQ77cf7vhKpzT767L7/3beCEnQD/eCsEueO78SpF TskKOSv2xEHFrAEFZGT1Sd4tZwJdBwA=
    =75S0
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Tiago Bortoletto Vaz@21:1/5 to Judit Foglszinger on Fri Feb 25 21:50:01 2022
    On Thu, Feb 24, 2022 at 05:44:34AM +0700, Judit Foglszinger wrote:
    I propose a ballot option for the GR
    "Hide Identities of Developers Casting a Particular Vote"
    that makes the following changes to the constitution.

    1) Do not make the identity of a voter casting a particular vote public.

    6) Codify that our election system must permit independent verification
    of the outcome given the votes cast and must permit developers to
    confirm their vote is included in the votes cast.

    So it's the proposed GR minus the changes
    not directly related to introducing secret votes.

    I ask for seconds aka sponsors for this Option.

    Rationale
    =========

    Give the opportunity to vote for secret voting without needing to additionally vote for unrelated/only slightly related
    constitution changes;
    for example for the change of mode of voting
    from email to something not defined.

    As it was mentioned in the discussion,
    there might be no consensus on which options are direcly related -
    This option regards the need to allow verification (6))
    as directly related to secret votes, because otherwise
    they would become completely unverifiable.

    Summary of Changes
    ==================

    1) Do not make the identity of a voter casting a particular vote
    public.

    6) Codify that our election system must permit independent verification
    of the outcome given the votes cast and must permit developers to
    confirm their vote is included in the votes cast.


    <h3>4.2. Procedure</h3>
    @@ -228,9 +246,10 @@ earlier can overrule everyone listed later.</cite></p>
    <p>
    Votes are taken by the Project Secretary. Votes, tallies, and
    results are not revealed during the voting period; after the
    vote the Project Secretary lists all the votes {+cast in sufficient detail that anyone may verify the outcome of the election from the votes cast. The+}
    {+ identity of a developer casting a particular vote is not made+}
    {+ public, but developers will be given an option to confirm their vote is included in the votes+} cast.

    @@ -371,8 +390,7 @@ earlier can overrule everyone listed later.</cite></p>
    necessary.</li>

    <li>The next two weeks are the polling period during which
    Developers may cast their votes. [-Votes in leadership elections are-]
    [- kept secret, even after the election is finished.</li>-]{+</li>+}


    Seconded.

    --
    Tiago

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCAAdFiEEYsAXsSqWkZu7etRd2EdHrOS2gT0FAmIZP+cACgkQ2EdHrOS2 gT1eMBAAsAOdrsaQFr6lxXBQ61rvF3eoSyQr8pSAH+l6EN0uTp4Utbggd9527+mI YL1QBfGhfOSV4zplbdT0MdWzxIG48IctM8gU+IPzZQjq61cCFHnCyRf2iNHQCLk2 NBCT4x0589jVFYuBytaNJtYIfQXiHsHkJPALYMlNMzfkCPyXpW5quLoAIwn82GYG cPA45ee8n0XqWM5GWfw5BagEUBcouIh8G+o50smuAeu25+MYBSBFV7F+zh433ae2 hyb47I93AwLhpWl75uHab0Fqa2HyOTBOFQUXqtUZLgIEYuTVUpy5+HNFNuZ1AMRu S87ZOkfmI2des0wHNqGxfEx6tjpkMW2c7Tyy+z/IDAF5YeCYBSLGkSopXzkMEJt3 WrZ3QR/oQ5aRAXInPb0iHST1UJPTLtm0S8pPVCLX+xwX3BDlrnwBMizG7ZTvWNe3 YOV8xVLccS+DyUajxL8f/8LIsuXFHLS3P5Ivms//C70YQcaBCD141rSfqgqcfeyK 2/CjSXdt+T1OQ4ZA2as6d+vobnjj5O/8eO1f8roOPU4LWImod4C9cs4RI9iv6/T4 BXbsCrJqJS7Av48rgE+u0BDmT5e7vOicfZ3QckgS4d0GS3pv41yE2lufBYocHg+L E97Ffe93OjclOoUceLobqgEzBbJpMx7r+HdRa3DcquZPS6LEvCc=
    =x4kr
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Holger Levsen@21:1/5 to Bdale Garbee on Sat Feb 26 18:00:01 2022
    On Fri, Feb 25, 2022 at 09:34:01AM -0700, Bdale Garbee wrote:
    While I'm personally probably more worried about how calls for votes are disseminated than about how the voting mechanism itself works, the
    proposed change feels like a slippery slope towards the possibility that
    how voting happens becomes generally less well understood. Requiring a
    GR to change the mechanism seems like a completely reasonable way to
    both vet the proposed change, and ensure a maximum number of potential
    voters understand what's changing.

    same here.


    --
    cheers,
    Holger

    ⢀⣴⠾⠻⢶⣦⠀
    ⣾⠁⢠⠒⠀⣿⡁ holger@(debian|reproducible-builds|layer-acht).org
    ⢿⡄⠘⠷⠚⠋⠀ OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
    ⠈⠳⣄

    :wq

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEuL9UE3sJ01zwJv6dCRq4VgaaqhwFAmIaW3IACgkQCRq4Vgaa qhyKkhAAq3k4ZsD48+URPHpHNRVQuTDg1uYcItXJKv8TPc/1/AxokN5Dq2gIgR1/ IxdqJF+GDXbAO9OE1Q9gPe5aEK9qDXP7OwTuZjzf/f+cfb7AZfk4dD7wGtHT94vE ERckdnyjPkUCHX43TjJpwf7CdpB6foSoeo2pVNA8AAG4DdUXQCCKUJTCOzhz/OmQ F6vdoU6qd3RmkqK8dJ09Q6ChLaJeKgGDbMx2yTzBAb2WmW2g5fosj2F+KFSYsusq snsP4dUNsGB5SCpDwJmdW4s3uhmXFo0KGHRn7Y1yjUhfQaVb8vvQbB/pqbY4SzVx 4PtSjP3C2o6HSZShYLb3R73teryV6TwTXLbypLaPDo1dPOgKxTT48LX+2obdS6/S rCLVJ1XLxP6xJv+nzadef2PkRpCx0izPtKbGnl5eVh4RdxjjdoCgASWQOXeIG6uc GUt2S4F6oQe1YQT716l5tWIHXxzaoDbLKkZSzo5+3dhs7PPjMF9DJJA8nGnv2jQh orHTaUBvyBCXPVQeQ7mCgHh1GXEZD74lMDBRKuA+NWmNkbXqKaT+vYJ0NsDmhXZJ Qw/UgByhf3MDNj2hxBjW4M67hDCPzhRwfB6rLkrVqSQM5HFp0msa+wr1nfpRDY8T K/KYPxdG9VHCpPOVwNQAFsrRON5Blt/ihqmVoPpLJLS
  • From Sam Hartman@21:1/5 to All on Sun Feb 27 19:30:01 2022
    "Russ" == Russ Allbery <rra@debian.org> writes:

    Russ> I completely agree with separating *unrelated* changes, but
    Russ> the whole point of this discussion is that some folks believe
    Russ> the changes are closely related, to the extent that one of the
    Russ> changes may not be desirable unless the other one is made at
    Russ> the same time.

    Russ and I have studied the same Debian history herey, so it is
    unsurprising we have come to the same conclusion on this.
    The above is a good summary of my position.

    As I explained to Martin, I'd be very open to an amendment to my ballot
    option to better explain why these changes might be related.
    I tried to do that in the existing rationale.

    -----BEGIN PGP SIGNATURE-----

    iHUEARYIAB0WIQSj2jRwbAdKzGY/4uAsbEw8qDeGdAUCYhvCywAKCRAsbEw8qDeG dPMpAP41aKdeRf6VmNIyaQLXFQx5vqOTrI9gXos2NZ/GeLfPBQEA11sRsa8M2JEs aOf6Nn7hdb2aiEd9To8fTVtqTKbZpQI=
    =79pZ
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Carsten Leonhardt@21:1/5 to Judit Foglszinger on Mon Mar 7 14:00:02 2022
    Hi Judit,

    it might be a bit late for a change now, but at first I had some
    difficulties parsing the last added sentence in 4.2:

    Judit Foglszinger <urbec@riseup.net> writes:

    <h3>4.2. Procedure</h3>
    @@ -228,9 +246,10 @@ earlier can overrule everyone listed later.</cite></p>
    <p>
    Votes are taken by the Project Secretary. Votes, tallies, and
    results are not revealed during the voting period; after the
    vote the Project Secretary lists all the votes {+cast in sufficient detail that anyone may verify the outcome of the election from the votes cast. The+}
    {+ identity of a developer casting a particular vote is not made+}
    {+ public, but developers will be given an option to confirm their vote is included in the votes+} cast.

    I think it would be clearer to add "that" between "confirm" and "their":

    {+ public, but developers will be given an option to confirm that their vote is included in the votes+} cast.

    Regards

    Carsten

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From felix.lechner@lease-up.com@21:1/5 to All on Mon Mar 7 14:10:01 2022
    Hi Judit,

    I think it would be clearer to add "that" between "confirm" and "their":

    {+ public, but developers will be given an option to confirm that their vote is included in the votes+} cast.

    Please proceed either way, at your choosing.

    Kind regards,
    Felix Lechner

    -----BEGIN PGP SIGNATURE-----

    iQKvBAEBCgCZFiEE8E0cIgLi+g0BiFTarFipTxFhjuAFAmImA3tfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEYw NEQxQzIyMDJFMkZBMEQwMTg4NTREQUFDNThBOTRGMTE2MThFRTAbHGZlbGl4Lmxl Y2huZXJAbGVhc2UtdXAuY29tAAoJEKxYqU8RYY7gbHcP/RMvsxOPwNtTe8Ar2SEG kAOa0UqQF4SGlGZmdt9BpDyrUP6wGyilGHzx9ykmZMVAH8NfJwcn0+WcNZqHIwr5 CN8RqX0m2sybfY2lswheICm8BksEq4bfrnI5yu8Chz/KdgKVFjj2HfDw1K5VqCwS 2cGQgpgAelrpB5y3J59SEip9QmmDCS931ZtPwep06X4GiTAlMq5LBIxUY81X4vDb u92wL3wPkYqjL25IIXyzJ7+jVhWJ7FtmvR5tjO8U9LVAv/dlkQO3UsjJAGkGtzUJ OMTmiFvJDszGj/5xqgKNndKialUljk0soHXJyDAFMNuux0KuQOIOsFvtIxX54Qpv Gf5j8DuVLkEtoPx2wAQGkuvREtja7CQwg4LT5JxV3sMEE6R75o/p5+tyCxgR8fjm agvTeLKwjq50MfZIMpSr1tHXwwQG5/EhuRbYjnsO4QALwp1Kqcb87rNfqaUhB26z SJZnNiHF3L88/SEzstQgqs0uL48AI4X9Q4jUFt6rkWs8CqhU8CzErjZDkLAURQRM v4EN37oxzQQDQFvZTUHPs1W956cqIgPA4otOdTZbf2gZQh4wt1BTx+p/8rehk6bH F6hL6aYhXGVRBryg7fIXWL2RtOlk0m+B9Rcd+18iqYyjeLn7GHQxCzRKTtZzcCEr BVd7s1+FUOmfVOcx9iqs2Slr
    =MFVc
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Judit Foglszinger@21:1/5 to All on Tue Mar 8 04:02:15 2022
    I think it would be clearer to add "that" between "confirm" and "their":

    {+ public, but developers will be given an option to confirm that their vote is included in the votes+} cast.

    I agree.
    It makes this option diverge a bit from the Option A it was forked from,
    but since the meaning is not changed it should be fine.

    So unless one of the seconds object, the wording is changed to include "that".




    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEeh+1J5uI1UvU9CMA9TaqcBEdVxYFAmImctcACgkQ9TaqcBEd VxZLJA/+KG/Zfkzomd1wX8cCBOk3utA29nQkbLq2DMl9YJRJMdec8LDAxTdPC4KK /ZtwDJYZff7wkv2M98LdiVl0x7T7KtPw1PmjPwvms5PL4JHtir+0Mxjd1LUm+GjG KUXr0Ea+dv2xE0FCWFwDNMikR7px2vBNinHFqf4D8sZ08f9gRoZRNLNvEgeJEtU1 7yIZPe4491dMvtt9erT5u1QDiDu47LEkqjyLtfhrltAIqPNMmd5GysvBdsz8D6XT ELgtxCLwXoy4Ue5PTR1fIoOZIboA7ZO43KeRzVoMzuEV03qFx597GDZBdA1Urm2v yy7qXtX2ckro/mkO9W48d+y2giETaAlx1rJTFOg6V8v6lXEDdHMDPCIqEwy2YQ1W 4xU1fFpf8A6F0uj0/GHq70p6pSzrc0sAGs+A0KWxqAHt3gCg0bpl1GUosfjEGUjA RZ3TyOaMYVELF24ovwokM+LNgpFOA5gpTV8frU+4GCXVfMepVbDCfYeNFbxywkJQ 64WbfcJYZLosGIKPn+G63V3+wsvBlLv5sMZP6zcdhUm77+iMxJwDJBpUWwF0qlhm ZXRUwEc+1Qf1ayQ9lVVLL0IeMKxLym6OYiw8YI3loFJTgAM023u2+UHSJ3vRQcr0 V5ZNNT7UDFWU8cO7H4nRC26Cs4oAxMWW3leTqcBSLoFUB/Gz6eA=
    =Gsv5
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Sam Hartman@21:1/5 to All on Mon Mar 7 23:20:01 2022
    "Judit" == Judit Foglszinger <urbec@riseup.net> writes:

    >> I think it would be clearer to add "that" between "confirm" and
    >> "their":
    >>
    >> {+ public, but developers will be given an option to confirm that
    >> their vote is included in the votes+} cast.

    Judit> I agree. It makes this option diverge a bit from the Option
    Judit> A it was forked from, but since the meaning is not changed it
    Judit> should be fine.

    Should I adopt the change as well or does it only make sense for ballot
    option 2?

    I haven't been following closely.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Judit Foglszinger@21:1/5 to All on Tue Mar 8 14:59:27 2022
    >> I think it would be clearer to add "that" between "confirm" and
    >> "their":
    >>
    >> {+ public, but developers will be given an option to confirm that
    >> their vote is included in the votes+} cast.

    Judit> I agree. It makes this option diverge a bit from the Option
    Judit> A it was forked from, but since the meaning is not changed it
    Judit> should be fine.

    Should I adopt the change as well or does it only make sense for ballot option 2?

    As this part is identic in both ballot options, I'd say the change makes sense for both.

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEeh+1J5uI1UvU9CMA9TaqcBEdVxYFAmInDN8ACgkQ9TaqcBEd VxaJJw//euSaDXu8eo9YjYkp+GCT56WLj2anxQ87RlxSM2TF8iOVZtPQ74xpnupO 0+i4381Md5Yl6hDM8K0VxvSNESEorVj1W8Iju8+ERF3poP4oaNOsf4IfKLRsq56G ZEz8wURQNSpEUWA1247RlVKN9ooY7hwbvXIvdhPkFRRXEscQoC80maPBNRBFiWKZ lLUAb34XZ/YiPIHSoPezrazG1O/b/TwyMC2Er/YmPJB7tFblNiIBKasUSjVNwUg5 AnLuwlIm3ck0S5EPseNpmQ+HJhYkS3P1Rl8s64C5qzUsJ0csQKOdJvAdLzHsMqgk OH/lT5kAUWvOgrRV3FB1mKKXE2OK+l6yw2Qz75zhcS2dbl1yCT9jgATGBQvzI4HP fxwy/rH3aqldnWLpBLalmHDYHXoFvMrJnd+FZEUgDlLTygyZHAG11TCrQhrlBtd4 Iz49AXL0uiLByrqzUISBO9z1HznppCAvyWfG9ka4UrDNpE2UfZM8yPzbyNQI33ep GfHOyD5MLt5Fe6f1djtmxqHQJ947sN+kfzOlP0aE16dnU/2mlsRge4flbAdQrnDH DwODg57ra8C1FFuzGq9XHvW/ngei3tb4XtpNFiiFRqIoLFMMBYasjJC/Kzqaqp3x hKxpBnAacDHxfAaYQAGH3k2NKe7yQnVVlU/jINi08qW1cOcygzU=
    =tUCK
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Kurt Roeckx@21:1/5 to Sam Hartman on Sat Mar 12 17:40:01 2022
    On Mon, Mar 07, 2022 at 03:12:57PM -0700, Sam Hartman wrote:
    "Judit" == Judit Foglszinger <urbec@riseup.net> writes:

    >> I think it would be clearer to add "that" between "confirm" and
    >> "their":
    >>
    >> {+ public, but developers will be given an option to confirm that
    >> their vote is included in the votes+} cast.

    Judit> I agree. It makes this option diverge a bit from the Option
    Judit> A it was forked from, but since the meaning is not changed it
    Judit> should be fine.

    Should I adopt the change as well or does it only make sense for ballot option 2?

    Sam,

    Can you confirm that you would also like this change?


    Kurt

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Sam Hartman@21:1/5 to All on Sat Mar 12 20:10:01 2022
    "Kurt" == Kurt Roeckx <kurt@roeckx.be> writes:

    Kurt> On Mon, Mar 07, 2022 at 03:12:57PM -0700, Sam Hartman wrote:
    >> >>>>> "Judit" == Judit Foglszinger <urbec@riseup.net> writes:
    >>
    >> >> I think it would be clearer to add "that" between "confirm"
    >> and >> "their":
    >> >>
    >> >> {+ public, but developers will be given an option to confirm
    >> that >> their vote is included in the votes+} cast.
    >>
    Judit> I agree. It makes this option diverge a bit from the Option
    Judit> A it was forked from, but since the meaning is not changed it
    Judit> should be fine.
    >>
    >> Should I adopt the change as well or does it only make sense for
    >> ballot option 2?

    Kurt> Sam,

    Kurt> Can you confirm that you would also like this change?

    I decline; it's too late to do without a chance of getting something
    wrong.

    I should have prepared a new commit a couple days ago and confirmed
    there are no objections.
    The way my option is worded, I'd need to generate a new commit hash,
    confirm that it didn't include any extra changes etc.
    It's too late to do that and I think the text is correct either way.
    In US English, "that" is optional in that sentence.
    I don't know what UK rules would say.

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iHUEARYIAB0WIQSj2jRwbAdKzGY/4uAsbEw8qDeGdAUCYizvtQAKCRAsbEw8qDeG dDd3AP9mEA+Xev6UIFmoABRdFiJnSbXG4+4j3dYYRpLdBBHlJwD+LRfV6ykxWdE5 /R+5ErBnFMWLFXMq9fjPOGJAfQlqJAM=dZaE
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)