Allow administrators of an election to check whether invitation emails have been received

[TheoSabattie]

CF. mailgun fails time to time to send email.

If an invited voter says "hey, I didn't get any invitation email", administrator should be able to check it before sending another invitation mail.

[domi41]

Constraints

• Don't store the email addresses in the database (RGPD)
• Prevent the administrator from snooping on cast votes
• Yet allow the administrator to check whether Mailgun managed to deliver the email or not

Smells like Zero Knowledge Proof (ZKP) to me…

[TheoSabattie]

Mmh... random idea:

Ask a password to the admin when inviting by mails => use it to encrypt emails => send encrypted email to backend => save encrypted emails.
On admin page => receive encrypted email => ask for password to decrypt email then check from mailgun api if email have been received.

(Encryption/Decryption is only on client side)

=> Server never keep real datas.