How important is it to verify the signing certificate...

cross-posted from: https://beehaw.org/post/663550

...of a file's SHA256 fingerprint? If I have my terminology correct here...