The accept_untrusted_content=False keyword in Receiver() and Sender.receive() is somewhat misleading, and has caused some confusion about its intended usage (see discussion in #24, #40, and #43).
I see two possibilities:
-
Rename it to always_hash_content=True, to mirror the same keyword argument in Sender() and Receiver.respond().
-
Rename it to require_content_hash=True, which is perhaps the more accurate terminology, as it allows requests to omit the hash attribute in the Hawk header, but still validates the content hash if included.