search

dbosk / crocus

Securely and privately verifiable protests
Other
0 stars 0 forks source link

How to propagate the protest ID? #40

Closed dbosk closed 6 years ago

dbosk commented 6 years ago

For protesters to be able to participate, they must know the protest ID. Actually they should know the protest manifesto and through that the protest ID follows.

The organizer can make a placard with a QR-code going to a website with the manifesto. Users scan the code with their phone and those who agree can compute the hash of the manifesto and use that as an ID.

dbosk commented 6 years ago

An extension would be to hash the manifesto using something like a Merkle tree construction so that a protester can omit certain portions that they disagree with.

dbosk commented 6 years ago

Who decides on exact manifesto and hash thereof? The organizer, right? How can one keep an attacker from setting up their own QR code plackards? How can a protester be sure the cid is correct?

In some sense: if the protester likes the manifesto, it's all good :-)

Basically, cid represents what the protester is protesting for. I had an idea of an extension in #40: that if we use something along the lines of a Merkle tree to hash the manifesto, then the user should be able to leave out certain portions they do not agree with.

But yes, there is a problem with two equivalent manifesto (same opinion phrased slightly differently) which would get different cid.

In either case, the worst case scenario is that it's up to the verifier to judge which cid's should be counted together due to this problem.