Is this e2ee or just public signing? Signing sounds most doable to make sure a message came from the server it claims is from.