Registration without a phone number on Signal will use zero-knowledge proofs
Cider9986
180 points
82 comments
September 13, 2026
Related Discussions
Found 5 related stories in 64.1ms across 6,460 title embeddings via pgvector HNSW
- Signal is working on a paid option to create an account without a phone number Cider9986 · 15 pts · August 10, 2026 · 71% similar
- Automatic Key Verification meetpateltech · 22 pts · August 11, 2026 · 52% similar
- Show HN: Anonymous age verification with passkey-powered encryption mikeysight · 13 pts · August 19, 2026 · 47% similar
- How Trail of Bits helps verify the integrity of Signal chats dgroshev · 69 pts · September 12, 2026 · 45% similar
- Compromising Signal's Contact Discovery Enclave (SGX) RobLach · 11 pts · August 27, 2026 · 43% similar
Discussion Highlights (11 comments)
atiq-ca
Signal still uses proprietary blob and uses google/apple service for notifications. Use molly.im instead which has solved these problems.
ynniv
you can't wave your hands, say "zero knowledge", and be private. this is too little information to be useful
rkagerer
Lots of discussion at that link, but what's the bottom line? Can you register without a phone number yet?
opengrass
Per the commits, this will require a purchase with Google Play Billing to mitigate spam while keeping the SMS verification option.
user3939382
I don't trust Signal. The device OSes and hardware are opaque, chatty, not private or trustworthy, the network backbone is completely owned by dragnet surveillance, Dual_EC_DRBG flavored shenanigans, so how could an app running on top of this suddenly be trustworthy? Especially one that's super high profile which signals inside a dragnet "someone is working especially hard to make this secret".
ggm
For those who missed it, unrelated to this specific ZKP thing the release cycle also now permits Android tablets without a SIM to be first-class adjunct devices without using wierd tricks or alternate clients. It may permit them to be the initiation/sign-on device, which would invoke the ZKP, but the point for me as an existing phone number denominated user, the point is I can be on my tablet with true signal now. Nothing against molly, wanted it in the base.
purpleidea
Signal needs to release all the infra automation code behind their backend. How they setup and manage it all should not be secret. It also makes it easy to rebuild if for some reason they are compromised. They've ghosted multiple people about this question. There's no reason a 501(c)(3) shouldn't release it.
smalltorch
The commit history is kinda wild
Cider9986
I'm curious about the cost because you can buy a phone number for Signal for ~10 cents (spammers likely get them cheaper). I would still buy it because you don't have to worry about losing your number or something.
2Gkashmiri
I know for a fact If you use "signal" matrix or whatever "security" app, you will get branded a terrorist in India, your life will be upended and you will face a long list of problems. https://timesofindia.indiatimes.com/india/ats-probes-use-of-... https://www.aninews.in/news/national/general-news/accused-da... https://www.deccanherald.com/india/secure-messaging-apps-lik... https://india-employmentnews.com/tech-category/delhi-blast-n... https://timesofindia.indiatimes.com/tech-news/Dangerous-Sign... And it doesn't matter you use a connected phone or not, they just get data from ISPs. And yes, using a VPN will get you knocked up as well. https://www.aljazeera.com/news/2026/1/12/indias-vpn-ban-in-k...
sysguest
any link to presentations/papers on this? I'm interested on learning ZKPs -- they seem so much like "fairy-tale come true" because I don't know much