We could sign anything we want — file contents too. Right now the signature is created with the private key and the filename. And this is verified there.