I think the idea is that by that you require that document is available before you can start computing the checksum. So this is good.

What I worry is that are you getting *whole* document requirement or just the header. Because in our current code we are passing into PDF.js whole array. But what you would want is that you can pass an URL and it will work.