It is possible that there is some difference in filesize counting, but I believe if both are got in bytes it should be ok. CRC is not a bad idea for file upload, although there is no similar possibility to check downloads. And there is always a risk of getting a corrupted download, even when bytesizes are identical (bit flipping errors etc.) and there is no way to check for that.