TLS is not decentralized in its common form, you just use a certificate signed by a third-party (CA). So you end up trusting this CA. Why are you willing to tru

TLS is not decentralized in its common form, you just use a certificate signed by a third-party (CA). So you end up trusting this CA. Why are you willing to trust this CA instead of Signal's server? If you self-sign a certificate instead, how do I check that the signature matches yours? To get a (proper) secure channel, you need at least an authenticated channel first.