# Trusting the sender's Content-Type vs pinning it

naive writer : key naive/upload.png  Content-Type = text/html  (sender said so; the .png suffix did not matter)
ImageStore   : the verifier refuses these bytes first: 
               not-an-image: no known image signature in the first bytes
objects under naive/ : 1