Estonia published its online voting source code, and HN argued about whether code can prove a vote counted
Estonia has a public repository for IVXV, the system behind its legally binding online elections. The fight was over what readable code can and cannot prove to a voter.
The repository holds the full stack: voting, collector admin, processor, auditor, verification, and ID integrations such as Smart-ID and Web eID. It is not used for active development but is kept in sync with what is deployed in elections.
An Estonian resident said he trusts it today, and fears the day that trust goes.
What the public repository contains
valimised/ivxv exists, in its own words, to make the source of Estonia's online voting system available for public review. Top-level folders cover the voting and choices flow, vote ordering, a collector admin tool and processor, Smart-ID and Web eID authentication, an auditor, and a verification component. The README says the repo is not for active development but is kept up to date so published code matches what is used in elections, with development supervised by the State Electoral Office. The page does not describe how verification works.
Secret ballot and verifiability pull in opposite directions
"The requirements of a secret ballot... and the fully verifiability you are asking for are mutually exclusive." — a commenter replying to a request for proof
That framing set the thread's terms. Another commenter pushed back with cryptography: if a vote is signed by the ID card's private key, a later independent check can reveal tampering even when the voting machine is compromised.
The goal is consent, not proof
"The goal of elections isn't to get scientifically or mathematically verifiably correct results. The goal is to produce agreeable consent." — atoav, a cryptography fan and hardware programmer
His case for paper: its trust is spread in a way any adult can check for themselves, which no software audit can match, however clever.
The view from inside the system
"Currently, with people trusting the government, this system is great... But I really fear the day that trust erodes." — an Estonian resident who votes online
He added that once trust is gone it may not matter whether the count is analog or digital, because people will distrust either. Another commenter put the gap in numbers: engineers may convince themselves after studying the system, but the other 90% of the population cannot do the same.
Get breakdowns like this every day
The top Hacker News stories, unpacked — by email, Telegram, or RSS.
A semaglutide trial found 9% slower epigenetic aging, but the authors say it doesn't make anyone younger
Researchers at UC San Diego re-analysed a placebo-controlled trial and found that people on weekly semaglutide aged more slowly on DNA-methylation clocks. The sample was 108 adults with HIV-associated belly fat.