Fighting fraud using partially blind signatures
Oct 16, 2019Ben Savage, Subodh Iyengar

Summary
This post introduces the concept of blind signatures as a cryptographic technique to enhance privacy in event reporting while still combating fraud. It details how blind signatures can be used to create unlinkable conversion reports by allowing a signer to sign a blinded version of data without seeing the original data. The post also discusses the challenges of linkability across requests and proposes using partially blind signatures with unique blinding factors for each step in a user journey. It suggests that browsers or operating systems could facilitate this process to further enhance privacy and security by generating nonces and blinding factors on-device and handling signature requests out-of-band.
More from the Application Security and Permissions trail
- How We’re Building Scam Alert on WhatsApp With End-to-End Encryption and Verifiability Guarantees
- Privacy-Aware Infrastructure in the AI-Native Era: An Asset Classification Case Study
- Labyrinth 1.1: Making End-to-End Encrypted Backups Even More Reliable
- How Meta Is Strengthening End-to-End Encrypted Backups
- Post-Quantum Cryptography Migration at Meta: Framework, Lessons, and Takeaways