Category Archives: Blog

Colorado’s 2021 internet voting bill

4/14/2021 Colorado is speeding towards approval of electronic (internet) return of ballots for self-identified disability voters. Any person on the registration list can during an election select the disability option on Colorado’s public internet voting portal. All that is required in lieu of  the usual signature on an affidavit of eligibility is the inclusion of an election qualified ID such as a drivers license or utility bill. As of April 12 2021 the measure passed out of the Colorado Senate on a largely partisan vote of 22 to 13. There was no debate on the Bill on the floor of the Colorado Senate.

I present here some comments on the dangerous and unreasonable situation that the bill presents for Colorado and then some suggestions for legislative text to improve the quality of the Bill. I include at the end of this post a transcript of the 5 minutes of testimony by the sponsor of SB21-188 that was followed by zero debate leading to adoption in the Colorado Senate on Second Reading Friday April 9,2021. It was adopted on final passage on Monday April 12 and sent to the Colorado House.

The bill text and current status and schedule can be read here:

https://leg.colorado.gov/bills/sb21-188

Here is a link to my experience using the electronic portal to vote and to return and to cure a Colorado ballot: https://electionquality.com/2021/04/voting-in-colorado-via-electronic-methods/

Harvie Branscomb observations about Colorado Senate Bill 21-188 (April 14, 2021)

tarnishes Colorado’s excellent reputation for election security; takes CO further from an evidence-based election; while experts agree that sending votes across the internet is risky and the US Congress considers taking the nation to a universal verifiable paper ballot, Colorado is heading away from verified paper;

  • SB21-188 in the form in which it was adopted by the Colorado Senate on April 12 will not contribute to Colorado’s exceptional reputation for election integrity. It instead establishes that Colorado does not deserve the magnanimous current praise. Turnout is not the only measure of election quality. Colorado must consider a variety of quantitative and qualitative measures of election integrity to assess excellence. The appropriate goal for Colorado is an evidence-based election with both substantive voter verification and also system verification both by officials and by public observers. Electronic methods of vote return and particularly those using the internet are not compatible with that goal. Colorado must promote limited use of electronic return of votes only for specific instances of disability and in contexts where other safer options are not viable. Colorado must continue to lead the nation by implementing quality assurance with extensive and excellent testing, reporting, accountability and transparency. To achieve that, SB21-188 will require a rewrite.

SB-188’s electronic ballot return will be easy to misuse while it legitimately benefits few;

  • An open records request reveals that 200 people in Colorado downloaded ballots using the existing portal for voters claiming disability in November 2021. That number is something that the public ought to easily find online but will not. SB-188’s addition of electronic return to an almost uncontrolled access to the most risky of disability voting methods means hundreds of thousands of persons might use this opportunity whether they need it or not. Only a fraction of the many possible future users of SB-188 cannot mark a paper ballot and are unable to independently return a paper ballot.  Specific voters gain desirable independence as the benefit of SB-188 while many others will gain only convenience at the cost of overall integrity for the election.

current methods of remote electronic assistance in voting are neither certified nor tested nor even accounted for in publicly accessible reports;

  • The software currently used in Colorado for voting activity that crosses the internet is not certified, not to our knowledge tested by federal, state or local election officials. The counts of voter use of these alternative voting methods is not effectively reported either to officials or to the public during and after the election. SB-188 should require the Secretary of State to publish reports of counts of ballots transmitted and numbers of voters using the alternative methods.

other ways to provide accessibility are more effective; many are already in place;

  • There are more secure means to bring accessibility enhancements to specific voters who need them. Colorado law already enables visits by officials to health care facility voters as well as curbside voting. The emergency ballot process is also available on the same internet portal that already includes an electronic return option. Those options argue against any urgency of need for SB-188.

rapid growth in usage of electronic return is likely for users that do not need the method for accessibility;

  • There is no conceivable way to curtail misuse or needless use of SB-188’s return by internet. It must be considered an internet voting bill for a large constituency as soon as the knowledge about the availability of the portal is widely shared. Likely over ten percent of all voters are justifiably considered having disability. But the need for leniency in that definition means many more may use the opportunity. SB-188 depends on the honor system. The website portal to request a ballot does not ask for proof of disability, much less proof of a print(ability) disability. The knowledge about this way to abuse the system can be widely and quickly shared, leading to widespread abuse. Numerous experts (e.g. National Academy of Sciences, Senate Intelligence Committee) have testified that internet voting is insecure. The risk for intrusion and denial of service and privacy invasion increases with usage. We should seek ways to limit electronic ballot return to those who absolutely need it.

safeguards originally provided through affirmation signature are withdrawn;

  • Use of existing electronic methods currently requires a signature on an affidavit to waive the expectation of ballot secrecy because there is a risk of interference or intrusion crossing the internet and in the computers at either end. The affidavit also crucially affirms eligibility to vote. The Bill’s amendment added by the Colorado Senate State, Veterans and Military Affairs Committee no longer requires any affidavit to validate the ballot and allows a copy of an ID to suffice. Anyone may legally validate an electronically returned ballot with the submission of a copy of an ID of a registered voter for whom the disability option has been selected. The affidavit is an honor system, but it should not be discontinued. Without an affidavit, it may be more difficult to prosecute someone for impersonating a voter by returning an electronic ballot.

voter verification of paper including using the voter’s own assistive technology provides the best practice integrity and ability to audit; paper printed far from the voter isn’t verifiable;

  • Numerous situations of disability include sufficient eyesight such that the voter could take advantage of the important step of verifying the contents of the paper ballot before casting. Some blind voters have the ability to access the printed selections on a paper ballot with their own accessible devices. An accessible device or other means for the voter to read and verify the printed paper ballot before return should be the focus of the law.

remote accessible ballot marking generates digital expressions of selections that must be recreated onto official ballots by teams of election workers;

  • All ballots machine marked outside a polling place either in electronic form or on paper must be duplicated onto fresh blank paper ballots at central count before tabulation. This is inefficient and costly for local officials. A bipartisan team must perform the duplication to ensure accuracy

may require a single vendor to supply both blank ballot delivery and electronic voted ballot return.

  • Since the SB-188 requires a single system it suggests that the electronic ballot delivery, electronic marking and electronic return may be limited to a single vendor contrary to the current separation of Secure Ballot Return from Democracy Live for ballot marking. This may accidently enforce the move to a new vendor.

How to improve the bill?

I include for advanced readers some proposed text for amendment to bring the technical quality and transparency of these electronic alternative methods up to par with the rest of Colorado’s voting system. I have not proposed a way to curtail misuse by those who do not need an electronic return (for whom the emergency route via the portal seems adequate). To prevent substantial loss of integrity of the exposure over the internet, some mechanism to sanction misuse or to discourage unnecessary use is desirable.

Definition: ‘Remote electronic assistive voting technology’ means a device or software or combination of both that is used to assess eligibility of a person, authenticate a voter, capture voter intent, return votes for tabulation and cure signature issues when such device or software is used for purposes of CRS 1-5-706 ( this statute about voters with disabilities).

Legislative introduction: The Colorado Legislature recognizes that voters using remote electronic assistive voting technology provided by the DEO deserve equal provision for integrity to voters that have not chosen to use the technology. The Secretary of State is therefore required to certify and may add conditions for use of remote electronic assistive voting technology prior to approving the acquisition of such systems.

For purposes of assisting voters with disabilities the Secretary of State shall establish a testing program that will assess the accuracy of capture of voter intent, the authenticity and eligibility of the voter, security against intrusion, ballot anonymity, and usability for specific disabilities. The SOS shall promulgate rules containing criteria for acceptance that depend upon the assessment metrics that are developed pursuant to this paragraph. The SOS shall publish on its website the results any such assessment and will also publish data quantifying usage of remote electronic voting technology in each election applicable to the State. Usage data shall include number of  voters and number of applicable ballot sheets reported by district for each phase of electronic assistance: ballot fulfillment, marking, return and cure.”

Here is a transcript of the promotion of the SB21-188 on the Colorado Senate floor by the principal sponsor Senator Danielson (former leader of America Votes in Colorado):

Colorado Senate Friday April 9 floor debate and vote on SB21-188 on 2nd Reading

Chair: (00:00)
Please read the title to Senate Bill 188,

Clerk: (00:03)
188 by Senators, Danielson, and Representatives Duran and Ortiz concerning a lower voter with a disability who seeks to vote through an electronic voting device to return the ballot electronically.

Chair: (00:17)
Senator Danielson.

Senator Danielson: (00:19)
Thank you. Madam chair, I move Senate Bill 188 and the committee report

Chair: To the report.

Thank you, Madam chair. Um, we made a pretty simple change in the committee report. Or I’m sorry, in the, in the committee, um, to address, uh, a security concern from the Secretary of State. When I introduced the bill, we accidentally struck, um, existing statute that might’ve interfered with the Secretary of State’s ability to produce their, um, ballot on the back end, in order to, uh, ensure the security of the measure. So we put the language back in as needed and, um, addressed any security concerns that they had and moved on. And I ask and aye vote on the committee report.

Chair: (01:05)
Is there any discussion on the committee report? Seeing none the motion is the adoption of the State Veterans and Military Affairs committee report. All those in favor, say, aye, those opposed? No. The ayes have it. And the committee report is adopted to the bill.

Senator Danielson: (01:21)
Thank you, Madam chair. Thank you members. Um, today we’re talking about Senate bill 188 ballot access for voters with disabilities. You might recall that a couple of years ago, we passed a measure that was called voting rights for voters with disabilities, which allowed for voters with disabilities to go in and mark a ballot and then download and then download the ballot and print it off and send it back in. It was a big step forward for voters with disabilities and the Secretary of State started implementing it right away. So we’ve been able to use the new system for the last couple of elections. And as a result, we’ve figured out some flaws. And the biggest flaw is the part of the process where the voter has to print out their ballot. So the problem here is a lot of people with disabilities and quite frankly, a lot of us in general now don’t have printers at home and that could be because we can’t afford them.

They are not necessary for other activities or we’re becoming more and more digital. And so, you know, the devices just aren’t present in a lot of homes. And I would say particularly what we’re talking about, are voters with disabilities. So we’ve got a great idea, but in practice we still have a barrier for voters with disabilities to cast a private ballot. And that’s really the problem here. The choice would be to, uh, utilize the mail-in ballot system that we have. But if you are, for example, a blind voter, you don’t have the same right to a private ballot as a voter with sight because you still have to have somebody mark that ballot for you and then turn it in, et cetera. So we’ve got a great system that would allow someone to mark a private ballot for themselves, which is a right that I cherish deeply.

However, because of the barrier that we still have in place for that voter to own a printer, they’re still unable to vote a private ballot. So the way we can do this is not unlike the system that we currently use for military and overseas voters, as well as voting in some kind of a disaster, for example, a wildfire where now the voter can go in and mark their private ballot. They can also, in order to verify our ballots in the state of Colorado you either have to have a signature verification process, or if you present in person, you have to have a photo ID. So if the voter can produce an image of their, uh, valid, acceptable ID, along with their ballot, they can return the ballot without the obstacle of the printer. And it’s a simple change today that will allow a lot of voters with disabilities to participate in the system and mark for what will probably be the first time in many of their lives, an absolutely private ballot, which again, like I said before is a right that I certainly do not take for granted, but maybe, maybe some able-bodied people do and to have the government, you know, what we’ve got in Colorado is a safe and secure and accessible system.

And the technology is finally there to remove this barrier, to allow people with disabilities to vote a private ballot and honor our American tradition enriching our democracy. So I urge an aye vote on Senate Bill 188 to make sure that people with disabilities have the same voting rights as everybody else. Thank you.

Chair: (04:51)
Is there any further discussion? Seeing none the motion before the body is the adoption of Senate Bill 188. All those in favor, say aye. Aye. Those opposed, No. The ayes have it and the Bill is adopted.

Voting in Colorado via Electronic Methods – Receipt, Return and Cure

Below is a summary of an exceptional voting experience geared towards a small number of voters who have special needs in Colorado. The method of voting consists of a Democracy Live product for delivery of ballot to voter and Colorado Secretary of State’s Secure Ballot Return by Linoma/HelpSys for electronic return.  Cure of a signature discrepancy using a third internet-traversing product by 2VOTE.com that operates on smart phones is also demonstrated. In this text “SOS” means the Colorado Secretary of State. Registered trademarks are the property of the respective companies whose products are appearing in this webpage. This information was collected during the November 2020 General Election in Colorado.

(1) Check the registration and ballot status

Colorado has arranged for a company “BallotTrax” to provide ballot status tracking for all counties except Denver. In Denver, voters use a different system.  There is also a page to check ballot status on the SOS web page. They seem to contain differing data. Below is the info from the BallotTrax system that I saw before I started the voting process.

First, I logged in to BallotTrax. Apparently, this requires the same steps as to sign up for BallotTrax. I am asked to provide my first and last name, birthdate and residential zip code. Note below the “ballot outbound” status of my ballot packet. “Ballot packet” is the correct syntax for ballot sheets that are enclosed in an envelope for delivery by USPS.

BallotTrax shows that my registration is sufficient to have received a paper ballot in the mail. But because I am far from home and performing caregiving for a disabled family member, I have an opportunity to vote without using paper.

You may as well know that I am very supportive of paper ballots and particularly hand marked paper ballots (HMPB). Any problem with the markings on hand marked ballots that might interfere with tabulation can be remedied by use of a well performed risk limiting tabulation audit. Because I am choosing to return by electronic means, I will not see the paper ballot that will be scanned for tabulation and possibly selected later for a risk limiting tabulation audit. That is an unfortunate defect of this voting method.

(2) Open the SOS website at myballot.sos.colorado.gov

There are several ways to discover the address of this page, such as by following the SOS UOCAVA guidance:

https://www.sos.state.co.us/pubs/elections/UOCAVA.html

or disability guidance: https://www.sos.state.co.us/pubs/elections/accessibleVoting.html

or one may wind ones way to this page starting from govotecolorado.com:

(3) Click on Vote My Ballot if one of the 4 conditions apply.

(4) Enter the requested data (name, birthdate, county):

(5) Check the box for “I am requesting an emergency ballot” (or other applicable choice) and click CONTINUE:

(6) Click on “I certify that the statement above is true” and click CONTINUE to see the contest choices on the ballot style assigned to your residence address.

Some sample portions of the ballot style assigned to me are shown below.

(7) Vote the several pages of contests

(some examples shown here):

(8) Check the review screen.

And preferably as Step 8 print the voted ballot sheet and verify its contents.

This Colorado remotely voted ballot pdf does not contain a bar or QR code and neither does it have one when votes are recorded on it. To be tabulated or audited the voter intent must be read from the  human verifable text that is seen here.

(9) Return to the website and click the PRINT APPLICATION TO SIGN button:

(10) Fill out and sign the application and the affirmation statement to accompany the ballot.

Personal data will already be filled in (it has been redacted here). There is also an image of a secrecy sleeve you can print:

The instructions for an accessible return are different and require physical return of the paper per Colorado law.

(11) Print and use a secrecy sleeve? Probably only if returning a physical ballot sheet inside an identifying envelope.

The secrecy may not be maintained upon opening but the secrecy sleeve will signal the desire and expectation of privacy. Note that the affirmation above includes a waiver of right to a secret ballot.

(12) Fill in the following application for an emergency (disability) or UOCAVA electronic ballot (the one that you just voted and reviewed and perhaps printed).

(13) When these are scanned into pdfs and if you remember where the ballot pdf (presumably printed as pdf by a Microsoft print driver) is located, go to the Secure Ballot Return system (https://ballotreturn.sos.colorado.gov/) and enter the data required:

(14) Drag and drop or browse the file system to select the files for your application and ballot image. Click Submit and wait for the confirmation:

(15) Check your return status using either BallotTrax or the Secretary of State ballot status page. In the page below from govotecolorado.com click either the “Sign up for BallotTrax here” or “Check my mail ballot status” to enter one of the two systems.

(16) Enter the data (first name, last name, zip code and birthday):

 (17) Open the My Voter Registration page

(18) Click on Ballot Information:

Note we learn that the pdf of the ballot and application have arrived at the county and have been queued for signature verification judges to check eligibility. This valuable information suggests we wait for the outcome of the verification decision.

(19) Try looking a day or two later for an  update on either BallotTrax or on the Secretary of State website. On second thought try the SOS site.

The BallotTrax doesn’t seem to update for a rejection for cure purposes. Here is the result from the SOS site showing the “rejection”.

Here we see that the judges have not approved the ballot packet for further counting and election officials are waiting for a cure from the voter.

(20) Wait for the cure letter or an email or phone call to tell you of the need for and way to cure. Or proactively contact the county to find out the next steps.

(21) Receive either an email from the county (if email address is on the SOS system) or wait for a letter through the mail. Here is what the email looks like and also what the letter in the mail contains:

Note that the requirement to “return by 11/12/2020” is unexpectedly vague even though it is a hard deadline at the election office. Also since the voter might be in any time zone, it would make sense to make this deadline very specific.

Here is the Affidavit that is printed on the reverse side of the above letter:

(22) Begin the cure process.

There are alternative ways to cure using in person drop off, mail, fax or email. The yellow card above explains how to use the new “text to cure” process.  I will now demonstrate how to use the TXT2CURE App on a smart phone:   First text “Colorado” to 28683.

(23) Click on txt2vote.2vote.mobi/colorado_votes/ – the link that shown in your messaging app.

The site showing on the returned page is  https://txt2vote.2vote.mobi/colorado_votes/index.jsp?mode=cure

Apparently sometimes the server is down such as it was during the weekend of 11/7 and 11/8/2020. In that case one of two different error notifications result. Here is one of them:

Here is another:

But later on Monday 11/9 this was the more anticipated result:

(24) Enter the voter ID that is shown just above the barcode on the cover letter:

(25) Click on Cure My Ballot (English):

(26) Click on “Yes I returned my voted ballot”.

At this point if the phone is not being held in landscape mode the app will ask you to reposition it. If you then turn the phone to vertical again (portrait mode) the app is likely to reload at Step 22. This may become frustrating.

Step (25) repeated as needed after the warning to rotate the phone: Note that the images are now landscape mode as the app will thereafter require. I signed by fingertip and then attempted to take the required photo of the ID but my somewhat outdated Samsung S5 would not respond at all to the “Take Photo” button. So I used a Samsung S10 (a relatively recent phone) to try again. Here are the sequence of images from the cure on the more modern Samsung Galaxy S10:

Check the box for Yes. I have not tried to check the other box.

If the app is working the next screen gives you the Affidavit language and a place to sign.

(27) Read the affirmation and if agreeable, sign on the line with your finger.

On my phone a fingernail or a stylus will not work. Note the “undo last stroke” is a very helpful button that helps to repair any mistakes that occur while signing. The request to “use your full legal signature in the box below” seems to be asking too much. I hope that this signature will not be uploaded as a the new best reference signature for the SCORE voter registration database and hence become the first reference signature for the next election. Colorado law somewhat ironically does not require a signature check on the cure document nor does it require a cleansing of any of the existing signatures on file. In most cases, the most recent presumed voter signature becomes the reference signature for the next election.

Click on the Submit button after signing.

(28) On the Samsung Galaxy S5 the “Take Photo” button simply didn’t do anything and the submit button took me back to step Twenty Two. On the S10 the button opened dialog to link a photo app from the devices library. Here is that dialog:

(29) Select a suitable camera application and allow it. I clicked “Just once.”

(30) Place your election allowable ID in a well lighted position and take a photo with your own camera app that will be launched by the 2VOTE app.

Review the photo as shown above and approve with “OK” or otherwise “Retry.”

At this point the app will spend a surprisingly long time rotating a circular pattern:

If you get bored as I did and decide to stop the internet connection, the app will object right away. If you use a back arrow once or twice, the following screen will result. Click “Continue.” That is Step Twenty Eight part two.

The app seems to easily recover from a form resubmission from a previous page and then at the end the following screen announces presumable success. Note that this does not indicate that a cure has taken place nor does it confirm that the local officials have received your data. As far as I can tell, the feedback on this crucial delivery of information is inadequate and if the app does not deliver the data the user will not be informed:

At this point one would wait a day and then start looking at BallotTrax or the SOS ballot status page to see if the status goes from rejected to accepted. I am still waiting to see that transition at this point.

End of story… for now.