@trash_cat @alive This matches my understanding (and is what my original comment about Signal was about). I've been unable to confirm this personally, because Signal never seems to have released any technical documents about sealed sender that would allow validating their design (which has always struck me as... odd).

It's the first time I hear of the paper you've mentioned; looks like that belongs on my reading list, thanks :)