They will be there if remote is Nexus 2.4+, and they are certainly not there if remote is "static repo" like Central is, unless... we modify the already changed specs and make `prefixes.txt.sha1` a requirement for example. For transport corruption the checksum is still the best and simplest, and if it's already available, why not use it?