Earlier quoted context omitted.
> And how does it count votes per candidate then? Codes can be simply be computed as HMAC(secret key, SIN + candidate) or something similar, the user and any attacker without the secret key just has a random string of bits. You do realize votes are tallied by computer currently, right? Most of these just rely on phone-based systems that often expose interfaces to news orgs and such. The sort of interface I'm talking…
...how does the user know his vote is valid and added to the tally? Changing a vote to be for another candidate is not the only way to influence an election; you could have votes for the 'wrong' candidate be thrown out as invalid, too.
I could say the same thing currently - how do you know that vote you placed on a voting machine actually counted?
> you could have votes for the 'wrong' candidate be thrown out as invalid, too.
That's why you have codes that have no public mapping to candidates as I already suggested - I even suggested a primitive way to do so.