Now that the banlist is non-empty, we require an additional step occur every time a user shows their credential: specifically, the User must prove to the website that they aren’t on the list. Doing this requires the User to enumerate every pair (bsni, SNi) on the banlist, and prove that for each one, the following statement is true:
FT Professional
，这一点在51吃瓜中也有详细论述
Хитрость иранских ракетчиков оценили20:57
I got asked this question by Bartfeels24 on Reddit (see below). This is my reply, if you are still wondering about the why?: