Aren't you ditching what most people understand by "electronic voting". In my opinion, there's no way to secure a Diebold-like black box. I agree that we need to produce a paper with the voter's name and their vote on it.

We cannot provide the voter with an ATM receipt because of the vote selling problem -- proof of how you voted makes it easier to sell your vote.

So we produce a piece of paper with the vote that the voter wanted on it, the paper can be human verified . . .

what about Oregon? Are postal mail votes not worth the risk?