With verification there are several steps that we take for people signing petitions. When they send an email, they get an email confirmation, so we can check that the email account is valid. It takes some action on their part. We also ask them to enter a couple of randomly generated words, using the recapture type of software that you would be used to using on websites to stop automatic signing of petitions through automated processes.
I think the level of verification and security are suitable for what the site is, which is an e-petition site. If someone is very determined to sign an e-petition, so be it, I think. Most of the checking, particularly on IP addresses and other things, is done by the technical staff who do account for patterns of signing that might be unusual, just to check that the system is working okay. The verification does certain things, but a determined person would be able to sign some petition from abroad.