Suppose there's an entity which produces files. User A has one of those files and decides to send it to user B. How can user B validate the authenticity of the file without communicating with the producer? Is it even possible? 
Validating authenticity of a file
security