SUM does not validate HTTP baselines
SUM cannot validate a baseline downloaded from an HTTP repository.
SUM does not validate a baseline it downloads through HTTP. The .exe files downloaded are not compared against a manifest file.
This is the expected behavior of SUM.