Oh well maybe zipping it is sufficient enough... Some use a lightning address thing or something. But it is one of the shifts in how this network is taking responsibilities of the centralized hosts. First you just had to look at a filepath and expect that to belong to a certain person. It was all serverside who hosted etc. You didn't need to verify anything. Now we do.