return bytes and from http
verify checksum