Signal 拟采用零知识证明技术支持用户无需手机号进行注册1。这一技术方案能够在验证用户名字符集和长度时,不暴露用户名的实际内容1,从而在身份验证过程中保护用户隐私。
不过这一方案也引发了用户的多方面关切1。用户担忧手机号与用户名是否能够完全解关联,以及设备和服务器端是否存在残留数据1。此外,针对防止滥用的机制,评论者指出恶意用户可能通过一个号码注册、解关联后重复操作以创建无限账户,并建议 Signal 设置冷却期(如一个月)来遏制这类行为1。
Signal is planning to implement a registration system that does not require a phone number by leveraging zero-knowledge proof technology 1. This cryptographic approach would enable users to verify their identity and manage accounts while keeping their personal information hidden during the authentication process 1.
The zero-knowledge proof method would be used specifically to validate the character set and length of usernames without exposing the actual username content 1. However, the initiative has raised concerns among users regarding several security and privacy aspects. Questions have emerged about whether phone numbers and usernames will be completely dissociated from each other, and whether residual data might persist on devices or servers after de-linking 1. Additionally, there are worries about potential abuse vectors—specifically, whether malicious actors could register through a single phone number, dissociate it, and repeat the process to create unlimited accounts 1. To mitigate such risks, some have suggested implementing cooldown periods, such as a month-long waiting period between registration attempts using the same phone number 1.
评论
还没有评论,欢迎留下第一条。