Of course not to both.
Clueless.
Here as before you show you stubbornness with your newfound knowledge
of digital signatures.
Non Microsoft sources are unauthorized sources and carry risk no one
should take with something, certainly not a Service Pack.
The fact SP-2 was not available from Microsoft till yesterday does
nothing to legitimize the unauthorized source.
Now take your newfound knowledge somewhere it can do good, it does
nothing for anyone here.
To repeat:
NEVER get a Microsoft Service anywhere but directly from Microsoft.
Unless safe computing means nothing to you.