How does a voter know the checksum is not spoofed?