EAC - Voluntary Voting System Guidelines

Name : | Ian S. Piper
Organization : | Diebold Election Systems, Inc.
Post Date : | 9/29/2005
Section Comments
Section : | 6.4.5.2
Page no. : | 14
Line no.: | 14
Comment : | In this requirement, "The NSRL or other EAC designated repository shall generate reference information in at least one of the following forms: (a) complete binary images," the complete binary image cannot be posted to a public website for verification of integrity as this posting would allow distribution of the vendor's software without their permission. Vendors conduct a business in which they sell licenses to use their software product and the distribution of that software must be authorized by the vendor. The binary images can be placed into the escrow archive and the hash algorithm result codes or digital signatures can be posted to the website to verify the integrity of the binary images delivered to customers, but the binary images themselves must not be posted to the website. Proposed change: remove "complete binary images" from the requirement.