@colomar see Drew's article. We have to trust that the software Signal runs on their production servers is the same as the source code they publish. There is no way to check. One possible explanation for Moxie's refusal to implement server>server federation, or allow modified clients to connect to the Signal servers, or even work with #FDroid to make their client builds reproducible, is that they are not. #HoneyPot