原始链接: https://community.signalusers.org/t/registration-without-a-phone-number/2222?page=10
这次讨论强调了 Signal 如何利用零知识证明（ZKP）来保护用户隐私，特别是在捐赠徽章、群组成员身份和用户名验证方面。通过将身份与服务器端数据解耦，零知识证明确保了 Signal 无法将特定操作或用户与其元数据关联起来，从而加强了该应用程序的“去信任化”架构。 对话的很大一部分集中在将电话号码与 Signal 账户解除绑定的技术细节上。尽管用户希望找到取消注册电话号码的方法以增强隐私，但参与者对潜在的滥用表示担忧。人们普遍怀疑简单的“解除绑定”功能可能会导致垃圾邮件发送者和诈骗者大量涌入，从而创建无限多的账户。因此，共识认为，虽然从技术上讲解除绑定是可取的，但如何有效地实现它——或许通过冷却期或替代注册方法——对于开发者来说，在安全性与反垃圾信息措施之间取得平衡仍是一项复杂的挑战。
you have legitimate concerns, but you’re very wrong about this. zero-knowledge proofs are not only the technology behind donation badges and backup payments, but also behind groups. they can’t tie you to a specific donation just like they can’t tie you to a specific group.
the great thing about Signal is the client is designed to already not trust the server. in fact you can show that Signal is perfectly safe without even looking at server code.
ZKP is also used for verifying things like username character set and length without actually revealing contents which is super cool and comprises of math waaaayyyyy above my head.
I was wondering what ZKP was 
Also adjacent. The “save as pdf” is quite interesting. :)
For those who are already registered with their phone number and would like to “unlink” it without re-registering for the service… is that possible?
if this feature happens, signal org should clarify some technical details regarding privacy.
is phone number totally unlinked from username?
what remnants remains, locally in a device? in a server?
my guess is that unlinking is not 100% unlinked. which is leads to a second point. should new account without phone number be better idea. unlinking phone number may not be best option.
although unlinking phone number could be free of charge.
I don’t think anything points to this yet.
That seems unlikely, because spammers could just get one number, register with that, unlink, repeat, to get infinitely many accounts for free. Unless they add a cooldown or something…
cooldown is reasonably in this case. but even with one month cooldown, it may not be enough to prevent spammers and scammers. it cannot be long either.
cooldown alone may not be enough.