Makes are signed, served over HTTPS, and you will appeared against a posted hash