This is a bit of a tangent, but I first heard of Intel SGX (Secure Guard Extensions) via Signal's blog post about secure contact sharing[0], so it's almost relevant :p From what I've read[1][2][3], Intel SGX is vulnerable to Spectre exploits. Does anyone know if this has changed Signal's approach to security at all? Granted, contact sharing was a technology preview, but I'm curious if SGX is still considered a feasible, "good enough" security measure for Signal Foundation.

[0]: https://signal.org/blog/private-contact-discovery/

[1]: https://software.intel.com/en-us/forums/intel-software-guard...

[2]: https://github.com/lsds/spectre-attack-sgx

[3]: https://security.stackexchange.com/questions/176635/how-does...