Community Wishlist Survey 2022/Larger suggestions/Make SecurePoll accessible through local wikis

This proposal is a larger suggestion that is out of scope for the Community Tech team. Participants are welcome to vote on it, but please note that regardless of popularity, there is no guarantee this proposal will be implemented. Supporting the idea helps communicate its urgency to the broader movement.

Random proposal ►◄ Larger suggestions The survey has concluded. Here are the results!

Make SecurePoll accessible through local wikis

Problem: To vote in a SecurePoll election, you need to be redirected to votewiki (vote.wikimedia.org). This leads to potential vulnerabilities (see phab:T298849) and it also requires the interface language of votewiki to be changed based on the language of the local wikis who are running an election there at each given time.
Proposed solution: Refactor the code of SecurePoll to properly use CentralAuth and SUL, so that users don't have to leave their local wiki at all to vote.
Who would benefit: Wikis that hold elections using SecurePoll (currently enwiki and fawiki, soon to include zhwiki and more).
More comments:
Phabricator tickets: phab:T298849 (it is private for security reasons)
Proposer: Huji (talk) 01:03, 11 January 2022 (UTC)[reply]

Discussion

What is forcing this in to the "larger suggestions" pile? — xaosflux ^Talk 02:25, 11 January 2022 (UTC)[reply]

May be "Refactor the code"? I wonder if it is possible to simply make voters to login into votewiki through CentralAuth. --Steven Sun (talk) 03:46, 11 January 2022 (UTC)[reply]

No, more likely the privacy/security aspects of it. That's gonna make this a really big task. Also steers it outside of the expertise of the community tech team a bit I think as they would have to consult lots of other teams. —TheDJ (talk • contribs) 13:42, 11 January 2022 (UTC)[reply]

By the way, what is the purpose of local Special:SecurePoll page? You still need to go to an external wiki to vote anyway. Hope one day it could be uesd as a standalone local voting portal. —— Eric Liu_（Talk） 16:41, 11 January 2022 (UTC)[reply]

It seems to be a fix for earlier days without SUL, but now, as we have it, it seems better to host elections locally (unless there's CU concern). 1233 （T / C） 16:29, 19 January 2022 (UTC)[reply]

Voting

Support Majavah (talk!) 18:47, 28 January 2022 (UTC)[reply]
Support Yes please, projects should have a way to conduct elections without depending on WMF staffers. — xaosflux ^Talk 19:23, 28 January 2022 (UTC)[reply]
Support Femke (talk) 20:14, 28 January 2022 (UTC)[reply]
Support. Thryduulf (talk: meta · en.wp · wikidata) 20:34, 28 January 2022 (UTC)[reply]
Support Tol (talk | contribs) @ 22:57, 28 January 2022 (UTC)[reply]
Support Izno (talk) 00:15, 29 January 2022 (UTC)[reply]
Support Aca (talk) 16:06, 29 January 2022 (UTC)[reply]
Support Mohammad ebz (talk) 18:10, 29 January 2022 (UTC)[reply]
Support —— Eric Liu_（Talk） 18:21, 29 January 2022 (UTC)[reply]
Support — SHEIKH (Talk) 02:08, 30 January 2022 (UTC)[reply]
Support Ameisenigel (talk) 09:28, 30 January 2022 (UTC)[reply]
Support Bluerasberry (talk) 17:27, 31 January 2022 (UTC)[reply]
Support Glerium (talk) 12:42, 1 February 2022 (UTC)[reply]
Support KingAntenor (talk) 07:11, 2 February 2022 (UTC)[reply]
Support 4nn1l2 (talk) 08:39, 2 February 2022 (UTC)[reply]
Support Sunfyre (talk) 09:58, 2 February 2022 (UTC)[reply]
Support Worm^TT 12:54, 2 February 2022 (UTC)[reply]
Support * Pppery * _{it has begun} 13:55, 2 February 2022 (UTC)[reply]
Support Qwerfjkl (talk) 16:14, 2 February 2022 (UTC)[reply]
Support Extraordinary Writ (talk) 23:10, 2 February 2022 (UTC)[reply]
Support TheGeneralUser (talk) 00:13, 3 February 2022 (UTC)[reply]
Support --Yining Chen (Talk) 05:48, 3 February 2022 (UTC)[reply]
Support --Luciferian ☆ 12:59, 4 February 2022 (UTC)[reply]
Support OK, votewiki only need to host config data (I don't want to see the "Log in" sign when we are voting) Thingofme (talk) 13:11, 5 February 2022 (UTC)[reply]
Support - Darwin ^Ahoy! 14:54, 5 February 2022 (UTC)[reply]
Support Actorsofiran (talk) 21:01, 6 February 2022 (UTC)[reply]
Support Bas dehaan (talk) 23:12, 6 February 2022 (UTC)[reply]
Support--Vulp❯❯❯here! 04:52, 8 February 2022 (UTC)[reply]
Support--ChhTJ096 (talk) 19:27, 8 February 2022 (UTC)[reply]
Support Yes we need this! Carlosguitar (talk) 23:09, 8 February 2022 (UTC)[reply]
Support ✍️ Dušan Kreheľ (talk) 19:15, 10 February 2022 (UTC)[reply]
Support, definitely as a person who knew what happened in the last few securepoll elections.--1233 （T / C） 13:53, 11 February 2022 (UTC)[reply]