I see the problem: [anything] after the website domain is redirected to profile/[anything]. Imagine running that redirect repeatedly. It will keep on adding “profile” to the beginning. To stop it, you have to make sure the URL after the domain doesn’t start with “profile”, otherwise you’re in danger of a loop.
I thought it was open source.
https://github.com/signalapp/Signal-Server
This doesn’t prevent them from running different software or logging requests, but we have unsealed court orders, which is better than most other services that could receive them.