[marshray]

What identity token would you prefer?

Would it be bound to the mobile device in any way?

Would it require that a canonical list of registered identities be stored server-side?

How would you impose a cost on spam accounts without burdening users?

Just a few considerations.