Why not unconditionally use ChecksumPolicy.IGNORE? Not a big deal, but extra remote request for SHA1/MD5 files that almost certainly will not be there and do not add much even if they are, seems pointless.