Anon survey feedback

[vEnhance]

We'd like to be able to reply to anonymous student feedback.

[vEnhance]

Need a mechanism like the following:

• Student generates key K not sent to server
• Server stores comments in plaintext together with a hash H(U,K) for U = uid
  and K = this key
• Evan can reply to feedback and whatever
• If the student wants to edit or follow up, they present K to the server to
  prove they were original author of survey feedback.

The problem is how to store K. The student could generate a password, but they
might forget it. Could store client side cookie, but that's per device.

Best solution is to see if there's a way to integrate with Django built-in auth
somehow, but I need to research to see if or how that's possible.

[Incompleteusern]

If the student wants to edit or follow up, they present K to the server to
prove they were original author of survey feedback.

The server can correlate K to an ip address which the server can later correlate to a student, I think

[vEnhance]

I don't know if I trust IP addresses to be that static either.

[AmoleR]

If the student wants to edit or follow up, they present K to the server to
prove they were original author of survey feedback.

The server can correlate K to an ip address which the server can later correlate to a student, I think

IP addresses is the worst way to go about it. You reset your router, your MAC changes, and so does your IP address. Or you go somewhere else. Whatever.

Best solution is to see if there's a way to integrate with Django built-in auth
somehow, but I need to research to see if or how that's possible.
Isn't a great idea, but can you make K the hash of the student's ID with a random string? Like obviously not 100% protection, as the student IDs are clearly enumerable, but it's a lot of work to do it.

I don't know how else you want to do it. Curious: what feature do u think Django auth would have that solves this?

[Incompleteusern]

I feel like that if this is done in Django, wouldn't the auth token sent with the request reveal the student.

[jondoglover]

Can the server generate the key, automatically email it to the student, and immediately delete the key? It never stores the key or the email that way. If the student wants to follow up, then they can find the key that was emailed to them, and the server can just check the inputted key against the hash to verify.

[vEnhance]

Right now the server does not have any email capability at all.

[Incompleteusern]

• Force every student to generate an anonymous PGP key.
• Survey is paired with a PGP key when entering feedback.
• Evan responds to feedback in a public channel open to all.
  • Each message in this channel as a header with the PGP-Key for convenience, and the text below is encoded by Evan with the corresponding PGP key so only the person who wrote the feedback can read it.
• Another Google form is used for the PGP key holder to respond with another response, and also sign their response.