Ok, so if we download a file where ```reported_length > required_length```, what does that mean? It means that the server claims that the file is actually bigger than what signed metadata told us. There are a few reasons why this could happen: metadata is not in sync with the data; server is incorrectly reporting the Content-Length.

That's fine. We go ahead and download the ```required_length``` of bytes anyway. If the hashes don't match, we would know, right?