Community Wishlist Survey 2022/Larger suggestions/Make SecurePoll accessible through local wikis

Make SecurePoll accessible through local wikis

  • Problem: To vote in a SecurePoll election, you need to be redirected to votewiki (vote.wikimedia.org). This leads to potential vulnerabilities (see phab:T298849) and it also requires the interface language of votewiki to be changed based on the language of the local wikis who are running an election there at each given time.
  • Proposed solution: Refactor the code of SecurePoll to properly use CentralAuth and SUL, so that users don't have to leave their local wiki at all to vote.
  • Who would benefit: Wikis that hold elections using SecurePoll (currently enwiki and fawiki, soon to include zhwiki and more).
  • More comments:
  • Phabricator tickets: phab:T298849 (it is private for security reasons)
  • Proposer: Huji (talk) 01:03, 11 January 2022 (UTC)Reply[reply]

Discussion

May be "Refactor the code"? I wonder if it is possible to simply make voters to login into votewiki through CentralAuth. --Steven Sun (talk) 03:46, 11 January 2022 (UTC)Reply[reply]
No, more likely the privacy/security aspects of it. That's gonna make this a really big task. Also steers it outside of the expertise of the community tech team a bit I think as they would have to consult lots of other teams. —TheDJ (talkcontribs) 13:42, 11 January 2022 (UTC)Reply[reply]
By the way, what is the purpose of local Special:SecurePoll page? You still need to go to an external wiki to vote anyway. Hope one day it could be uesd as a standalone local voting portal. —— Eric LiuTalk 16:41, 11 January 2022 (UTC)Reply[reply]
It seems to be a fix for earlier days without SUL, but now, as we have it, it seems better to host elections locally (unless there's CU concern). 1233 T / C 16:29, 19 January 2022 (UTC)Reply[reply]

Voting