Which is why I mentioned using certificate based authentication (AKA, client-side TLS certificates). Not only does the client verify that they're connecting to the correct server via the server side TLS certificate, the server can verify the client though the client cert.
This also assumes that those who want to vote online have the knowledge to properly secure their private key.
> They further handwave away the significance of stealing an election because catastrophic harm would only happen _sometimes_.
Has our foreign policy towards Israel, Egypt, Saudi Arabia, Iran, North Korea, Cuba, to name a few countries, changed significantly depending on whether someone from the Democratic or Republican Party is president?
I would say that gerrymandering has done far more to disenfranchise voters compared to theoretical attacks against the personal devices of those who choose to vote online.
