added doc + integrity check on incoming GET messages