[fao_]

Is that the version that is actually deployed to their servers, though?

[fastball]

Is that possible for Signal to prove in a meaningful way?

[ryeights]

Intel SGX? They are already using it for some portion of the server code.

[ohthehugemanate]

Well your signal client performs SGX remote attestation before sending any contact data to ensure that the server codebase matches a valid release. So if they're not running the published source, your client will refuse to share your contact information and social graph. Note that messages are e2e encrypted on the client side, so they don't enter into it.

[barbazoo]

Isn't that impossible to prove for any OSS backend out there?

[lkxijlewlf]

Why wouldn't it be?

[kitkat_new]

because https://www.reddit.com/r/privacy/comments/qlw1ag/signal_is_a...

[Klonoar]

Surely you could link to the actual blog pose rather than a subreddit that regularly crosses the border into conspiracy theory territory.

[speedgoose]

Backdoors.