MiKTeX package installation verification from web endpoints

[carelsc]

• Does MiKTeX verify the validity and trust of the SSL certificate of miktex.org and the selected package mirror (e.g. https://tug.ctan.org/) when it downloads packages?
• Before MiKTeX installs a LaTeX package, it appears to first verify that a hashed value of the package matches the value in its internal database. Which endpoint(s) does MiKTeX use to update these values in its internal database?
• Does MiKTeX have any other mechanism (e.g. package signing) to verify the packages it downloads and installs?
• Which web endpoints does MiKTeX connect to?

(Opinions expressed are my own)