> They can technically exist? Do you mean in the specific case of ring signatures? Or at all? There are already threshold-signature-based schemes for doing t

> They can technically exist? Do you mean in the specific case of ring signatures? Or at all? There are already threshold-signature-based schemes for doing this with ECDSA (though they're very gas heavy at the moment). But none has emerged for ring signatures yet beyond the paper stage.