@rene_mobile @reto @signalapp Your post is a nice breakdown. There is a tricky balance here: of course more systems implementing trusted E2EE methods is a good thing, but its turned into a marketing bullet point, like "fully private because E2EE". As for #Signal, last I've seen, they don't really do Reproducible Builds. Their process uses the binaries for their own native code, and just reproduces the Java and Android resources part. And Signal releases still include proprietary libraries.