I assume that ValidateSignature would throw if validation fails. If yes, you should update the list of exceptions in the method comments.