Due to difficulties making private voting a viable reality , we've been playing around with an alternative approach: public/private votes becomes "federated votes" where you can choose whether to send your vote off to other instances or whether it only counts locally and doesn't get federated.
There are obvious drawbacks to casting a vote that doesn't federate. But this avoids all the issues with which instances to trust (and who decides that) and avoids the distrust generated by all these sockpuppets with weird names running around and the need to explain in difficult technical detail why we're doing that, no it's not vote manipulation, don't ban / defederate us, etc etc
The video shows how the user interface could work. Basically there is a setting in your profile that determines whether your votes federate and an optional override you can use on a case-by-case basis.
There is an assumption here that people will generally choose one mode (public or private) and stick with that for most of their votes. The popup will only be used rarely so the extra clicks and the waiting involved won't be much of an issue.
Thoughts?
This feels like yet-another attempt at making water not wet, but at least it stops from having servers putting out data on the rest of the federation without any accountability.
It adds more options for the user and the instance hostibg doesnt have any downsides.