My local concert venue could sign their tickets with 4096-bit RSA, and make us take our shoes off and go through an x-ray before we come in like at an airport. They could have an airtight process; it would stop almost nothing, while making the process far more difficult for patrons.
Yes, I dismiss your desire for an airtight process, because I think it's security theater, whose actual outcomes would be massive and largely detrimental relative to the actual desired outcomes.
I am talking about the usefulness of security theater on the margins. At a concert venue, and at a polling place, we can do things that, in the abstract, increase security, but provide little to no actual benefit and actually serve to make the process more difficult and unpleasant on the whole.
(Ignoring RSA tangent, making all concert-goers go through an X-Ray to screen for weapons and drugs would catch more weapons and drugs than the current pat down/bag check process does. It would undeniably increase the security of the venue, while slowing down entry, exposing concertgoers to X-Rays, and IMO providing more annoyance than actual extra security)
It seems that you think, for voting, that's a fine trade-off. I do not.
edit: not disagreeing that signed tickets would prevent fraud. Disagreeing that it would be worth, say, an additional $5 fee on the tickets, plus slower more expensive readers to verify that they're signed correctly, plus plus plus etc etc. My entire argument here is based on the net utility of additional security measures, not whether or not those measures provide additional security.
Security theatre often refers to security from physical threat. I'm not talking about undetected fraud in a sense where that makes sense, but rather a verifiable, auditable process.
The only thing you referred to that was process related (versus physical security) was use of encryption keys. Why not talk about the pros/cons of that?
> It seems that you think, for voting, that's a fine trade-off
With respect to x-ray screens? Not at all, nor did I say such a thing. Nor do I think all things that could be described as "security" are exactly equivalent to each other, such that you can mention x-ray scans, and the argument automatically extends to RSA keys.
Yes, I dismiss your desire for an airtight process, because I think it's security theater, whose actual outcomes would be massive and largely detrimental relative to the actual desired outcomes.