>>11591391 (pb)
> Why does the Dominion Voting System user manual say to not enter a password?
They're running the "import" wizard. The lack of a password means that the digital certificate that's being imported is not encrypted. The certificate itself will still be encrypted using the private key, but the PFX file being imported (which contains both the public and private keys) is not.
So it's a security vulnerability, but not one that the outside world can exploit. But anybody with a copy of the PFX file would be able to access the private key, and could use that key to intercept and decrypt all traffic that's encrypted with the public key.
So it's an inside job, or simple incompetence.