Comment by mjg59

You say that, and also remote attestation is how Signal knows it's talking to a legitimate SGX enclave running the expected payload