sending invalid checksums is bad