It's being called the ultimate election year, when countries with half the world's population can vote for their leaders.

This is a big test of democracy that requires millions of polling places and billions of ballots.

But voting's not always easy.

In some places, people need to travel long distances or wait in long lines.

In the United States, we vote on a Tuesday, so sometimes people need to take off from work.

I'm very excited to go vote.

And I'm wondering, wouldn't it be easier if I could just...

Why can't I vote online?

Over the past few months, I've been talking to voting and security experts to try to answer that question.

And it turns out that the answer is more controversial, complicated, and high-stakes than I could have ever imagined.

Online voting.

Online voting.

Online ballots.

Online voting system.

Our adversaries are extremely talented.

Vulnerable to cyber attacks.

It's simply not secure enough.

They have unbounded amounts of hackers, computers, and cash.

Faster and easier.

More convenient and boost voter turnout.

Total security for your vote.

Might be the future of elections.

One of the surprising origins of online voting is actually space.

In 1997, the U.S. state of Texas added an option for online voting to let this astronaut vote from the Mir space station.

We fill out this application, the ballot is encrypted to us, we send it back down, and they record the vote.

This tradition of allowing astronauts to vote from space is still happening.

The two American astronauts that are trapped on the ISS right now are planning to vote this way.

And now, all of these states allow options for online voting for military and overseas citizens.

All in, about 300,000 Americans voted online in 2020.

Around the world, this map isn't exhaustive, but all of these countries have options for people to vote online to varying degrees.

But again, it's mostly available to people with special circumstances, it's not available to everybody.

In most of the world, voting looks like this.

In India, for example, the world's largest democracy, people go to polling stations and then vote using electronic machines like this.

And then election officials paint their fingers with ink that lasts around two weeks.

This helps prevent fraud.

Or in Gambia, for example, people place marbles into colored drums like this.

Or in the United States, here's me voting for the first time when I was 19.

I love that picture because I got all dressed up.

When I go this year, I'll mark a paper ballot, put it into the machine like this, and my vote will likely be counted using an optical scan ballot counter, which records the vote by reading the ballot like one of those Scantron tests you might have taken at school.

Importantly, the physical paper ballot is kept as a backup in case of an audit or a recount.

Many countries do something similar to this process.

The totals then get sent to a central office, which reports unofficial results.

That's what we see on TV on election night.

So this is the map right now.

Too close to call.

We can now project the winner of the presidential race.

The official results can sometimes come weeks later after election officials have had a But only about two-thirds of eligible U.S. citizens usually vote.

Compared to other countries, that's not great.

The biggest dream North Star of online voting is to help increase the number of people who vote.

We don't know that it'll do that.

But it would be enough, in my mind, if it just made it easier for people to participate in their own democracies.

If and only if we can do it safely.

The biggest thing to remember here about online voting is that the stakes couldn't be higher.

We're talking about the most important, well-armed countries in the world choosing who runs them and trying to affect who runs their enemies.

This is cybersecurity on a whole other level.

If you're one of the select people voting online in the U.S. now, you often have to email or fax your ballot.

And the cybersecurity experts that I spoke to were very clear.

That is not a system that you want a whole country using.

But this is huge if true.

So let's imagine.

What would good online voting actually take?

This is Dr. Joe Connery and Dr. Josh Benalow, who are both cybersecurity experts with over 20 years' experience working on online voting.

They're going to be our guides to understand why this problem is so hard and how we might be able to solve it.

How hard is this problem, really?

It is a difficult problem.

We don't have all of the problems solved or well enough solved.

I usually will list four basic challenges to voting online.

And the first is credentials.

If you're voting online, you have to have credentials of some sort, digital credentials.

There are places that have this.

In Estonia, every citizen gets an electronic ID card, which they use for healthcare, taxes, and since the early 2000s, online voting.

When an Estonian goes to vote, they use their ID card to validate their identity and then cast their vote.

In Europe, national ID cards are a thing and they've been around forever.

But in the U.S.?

In America, there has always been an extreme resistance to the rollout of a national ID system.

Social security numbers?

You have a number.

That is true.

And that number sort of represents the foundation of what could be, you know, the first step of 1,000 to get to a national ID card from a technical standpoint.

But from a political standpoint, it's simply a no-go.

This isn't just technical challenges.

It's political ones, too.

The second challenge is both technical and political.

Coercion.

If I'm using a phone to vote and I log into the phone, like with my facial ID, I can just then hand that to someone else and they can vote.

Though you can't do that in a polling place.

Imagine your boss says that they'll give you $500 to vote for a particular candidate.

It's crucial that your vote is a secret.

And not just that you vote in secret, but also that you don't have a receipt that you could then take back to your boss and say, ka-ching.

When we didn't have secret ballot, we had lots of vote selling and vote buying and, you know, manipulation of voters.

Estonia deals with this by allowing voters to recast their vote as many times as they want online, with the last recorded vote being counted.

So if someone forced you to vote a certain way, you could re-vote later.

We think of other things like online banking as being secret.

But by this standard, they're not at all.

In banking, you must not be secret.

You're logging into a website and every transaction you make has to be part of your public ledger shared with the bank.

You can see all of your transactions afterward and your bank can see them too.

Online voting is not like online banking.

That brings us to the third problem with online voting.

Client malware.

Hackers.

Data breach.

Major data breach.

Stole private information.

Paralyzed by ransomware attacks.

But first I gotta tell you about another piece of technology.

This.

I love the backstory of this company.

They were originally an aerospace company and they made parts for a Mars rover and the International Space Station.

And then in 2020, they took all of that engineering expertise and they brought it to this razor.

This is the Henson AL-13.

It also feels like a piece of engineering.

Like this does make me feel cool.

One of the problems with razors is that they're typically not supported well enough.

So the blade actually moves a little bit along your skin.

And that's one of the reasons that people get razor burned.

The blade only extends past the shave plane a tiny little bit.

It's .0013 inches, which is actually less than the thickness of a human hair.

That also helps the razor hold the blade at the ideal 30 degree angle.

It's also completely plastic free.

And not just the razor, but the packaging too.

And I found it cool that this company is doing a bunch of research to help understand what makes people get the best shave.

So like here, for example, the camera detects blood flow in the skin.

So red means more irritation and green means less.

If you're looking for a new razor and you love good engineering, you might enjoy it.

Click the link in my description.

Now, back to client malware.

As soon as you go to internet voting, that means every voter's device in the entire election is part of the election's infrastructure.

For a hacker, that's a lot of doors to get through.

And so your attack surface is what we call it in cybersecurity, has grown many orders of magnitude larger.

And suddenly you have to worry about the bad guys getting into any of those doors.

Yikes.

The thing most people are worried about here is vote flipping.

I try to vote for A, there's malware on my phone.

It casts a vote for B without my knowing it.

And you know, there's a vote for B.

But I use my phone to do all kinds of secure things, right?

Like why can't we just build an unhackable system?

I bank online, I send encrypted messages.

I don't understand yet how voting is different from what I already do.

The principal difference is the ability to confirm that things have been done properly.

And that confirmation is hard because of the secret ballot.

Right, so the thing that protects us from one problem, coercion, causes another problem, which is confirming your vote is correct.

But some cybersecurity experts are excited about a way to solve that.

It's called the Benelow Challenge, named after my friend Josh Benelow, who invented it.

Yeah, this Josh Benelow.

Yeah, I can do a demonstration for you of how that works.

I would love that.

Yes, please.

I have my trusty deck of cards here.

First I get to choose to vote red or black.

So I vote red.

So I am going to show you this and I claim for you that this is an encryption of a red vote.

Now I can submit my vote.

Or you can say, you want to check?

I want to check.

Okay, there it is.

And I can repeat this process as much as I want.

Black.

Would you like to keep it or would you like to check it?

I'd like to check it.

Okay.

Red.

Okay.

Challenge.

Thank you.

Black.

Okay.

Challenge it.

Okay.

Thank you.

Black.

Red.

Black.

I could do this all day.

I promise you will get bored soon.

What we're doing is testing the system, making sure that if there was a bug or a hack that was flipping votes, I'd notice.

And when I've done it enough times...

Keep it or challenge it?

You know, I trust you now.

I can submit my final encrypted vote.

This doesn't just make people feel like the system is working.

It mathematically proves that it is.

Statistics are very, very much on our side.

You can imagine a large election, 100 million voters.

If 1% of voters actually do a check, as much as 100 votes being flipped across the entire election would likely be caught somewhere.

In practice, my encrypted vote is a sequence of numbers.

And at the end of an election, all of those numbers would be recorded.

So I can see my number.

Not how I voted, but the fact that the vote I submitted went through.

Great, so we solved it, right?

Absolutely not.

Because if you do find a problem, what then?

If finding a problem on your phone calls an election into question, unfortunately, a lot of people would do that deliberately.

If the fact that I have malware on my phone causes an election to be overturned or upset, then there are going to be a lot of people who intentionally put malware on their phones.

But here's the craziest part to me about all of this.

Actually flipping a vote isn't even necessarily the biggest cybersecurity risk.

Imagine an enemy just makes it a little bit more annoying for certain groups to vote.

That brings us to the fourth and maybe highest stakes challenge with online voting, which is called a denial-of-service attack.

The goal of this type of attack is to overload a system with fake traffic, causing a website to crash or not load properly, or causing an internet outage in certain areas.

Even if it just causes a slowdown for a few hours, that could be catastrophic.

We know that rain influences voter turnout.

This would be basically people creating online weather in only specific places to affect how people vote just enough.

Slowing down voting.

That can change the outcome of an election.