> I can't think of any reason why this needs to be a hash of a phone number instead of a randomized string that's attached to your account. That’s what came to

> I can't think of any reason why this needs to be a hash of a phone number instead of a randomized string that's attached to your account. That’s what came to mind to me when I read this article. iMessage already uses per-device public key encryption, it seems like per-device UUIDs hashed with the user<->user connection could be used to make the sniffed hashes non-reversible without knowing the UUIDs of the sharing phone and one of his contacts