如果您的目的是验证软件的完整性，就应该下载签名文件。

If you intend to verify the software's integrity, you should download the signature file.

youdao

SecureClassLoader 首先从相应 URL 处装载字节，如果需要还会验证包围文档文件的数字签名。

The SecureClassLoader starts by loading the bytes of the class from the appropriate URL and verifying the digital signature of the enclosing archive file, if required.

youdao

jarsigner工具使用 keystore 生成或者验证 JAR 文件的数字签名。

The jarsigner tool uses keystore to generate or verify digital signatures for JAR files.

youdao