Signal is building phone-number-free registration on zero-knowledge proofs
Registration without a phone number on Signal will use zero-knowledge proofs
Signal's Android app is gaining the scaffolding for numberless accounts: new login screens, username setup during registration, and a fresh zkgroup credential. Community members note that zero-knowledge proofs already underpin donation badges, backup payments, and groups, letting the server verify a user without identifying them. Signal staff confirm ZKP also checks username length and character set without revealing the name itself.
the great thing about Signal is the client is designed to already not trust the server. in fact you can show that Signal is perfectly safe without even looking at server code.
- ggm
For those who missed it, unrelated to this specific ZKP thing the release cycle also now permits Android tablets without a SIM to be first-class adjunct devices without using wierd tricks or alternate clients. It may permit them to be the initiation/sign-on device, which would invoke the ZKP, but the point for me as an existing phone number denominated user, the point is I can be on my tablet with true signal now. Nothing against molly, wanted it in the base.
- purpleidea
Signal needs to release all the infra automation code behind their backend. How they setup and manage it all should not be secret. It also makes it easy to rebuild if for some reason they are compromised. They've ghosted multiple people about this question. There's no reason a 501(c)(3) shouldn't release it.
- opengrass
Per the commits, this will require a purchase with Google Play Billing to mitigate spam while keeping the SMS verification option.
- rkagerer
Lots of discussion at that link, but what's the bottom line? Can you register without a phone number yet?
- ynniv
you can't wave your hands, say "zero knowledge", and be private. this is too little information to be useful
- sysguest
any link to presentations/papers on this?
I'm interested on learning ZKPs -- they seem so much like "fairy-tale come true" because I don't know much
- Cider9986
I'm curious about the cost because you can buy a phone number for Signal for ~10 cents (spammers likely get them cheaper). I would still buy it because you don't have to worry about losing your number or something.
- smalltorch
The commit history is kinda wild