> This is about the server which is not open source The Signal server implementation is mostly open-source, and some users managed to run their own instance.

> This is about the server which is not open source The Signal server implementation is mostly open-source, and some users managed to run their own instance. > you wouldn't know if they actually run that code without modifications That's the point of SGX, but even without it, most guarantees you get from the Signal protocol come from the clients. E.g. you don't need to know what the server is running to ensure that the content of your messages is not leaking. Other than that, being decentralized on its own doesn't magically solve the metadata problem. Signal leaks less metadata than most messengers, including decentralized ones.