Due to difficulties making private voting a viable reality , we've been playing around with an alternative approach: public/private votes becomes "federated votes" where you can choose whether to send your vote off to other instances or whether it only counts locally and doesn't get federated.
There are obvious drawbacks to casting a vote that doesn't federate. But this avoids all the issues with which instances to trust (and who decides that) and avoids the distrust generated by all these sockpuppets with weird names running around and the need to explain in difficult technical detail why we're doing that, no it's not vote manipulation, don't ban / defederate us, etc etc
The video shows how the user interface could work. Basically there is a setting in your profile that determines whether your votes federate and an optional override you can use on a case-by-case basis.
There is an assumption here that people will generally choose one mode (public or private) and stick with that for most of their votes. The popup will only be used rarely so the extra clicks and the waiting involved won't be much of an issue.
Thoughts?