I'm swiss, so I guess that soon I'll have to vote about this voting system :)
E.g. chapter 3.4.3 of the architecture PDF might be interesting to end-users/voters:
>End-to-end verifiability: Voters should be able to verify that their vote has been recorded-as-cast and cast-as-intended; and both observers and independent auditors should be able to check that votes are counted as recorded without compromising voter's privacy.
>>Recorded-as-cast verifiability: This verifiability level is achieved by means of vote confirmation receipts which are displayed to voters after their last vote has been cast and can be looked for once the election is closed on a Receipts Portal or a Receipts List made available to voters.
>>Cast-as-intended verifiability: This verifiability is achieved by means of Choice Return Codes, which are sent by mail to the voter before the election starts and univocally represent voter's valid options. The server can generate these Choice Return Codes and send them back to the voter while voting without knowing their real option reservation. This way, the voter can check if these codes match with the ones contained in the paper voting card.
No. But this is the same with ballot or mail votes in Switzerland, identity is not verified. So in theory you could fake paper voter cards already today, but it's difficult to scale this onto a useful level.
The verification system for the proposed eVoting system works with verification codes individual to a voter. So even if you and I vote YES on a certain topic we will have different verification codes.
E.g. chapter 3.4.3 of the architecture PDF might be interesting to end-users/voters:
>End-to-end verifiability: Voters should be able to verify that their vote has been recorded-as-cast and cast-as-intended; and both observers and independent auditors should be able to check that votes are counted as recorded without compromising voter's privacy.
>>Recorded-as-cast verifiability: This verifiability level is achieved by means of vote confirmation receipts which are displayed to voters after their last vote has been cast and can be looked for once the election is closed on a Receipts Portal or a Receipts List made available to voters.
>>Cast-as-intended verifiability: This verifiability is achieved by means of Choice Return Codes, which are sent by mail to the voter before the election starts and univocally represent voter's valid options. The server can generate these Choice Return Codes and send them back to the voter while voting without knowing their real option reservation. This way, the voter can check if these codes match with the ones contained in the paper voting card.