Just above the diagram the author speaks about this: "In addition to these operations, the subscription server may verify the intent of the subscriber by makin

Just above the diagram the author speaks about this: "In addition to these operations, the subscription server may verify the intent of the subscriber by making an HTTP call to the provided callback with the same parameters requested before and an additional hub.challenge that must be echoed back by the subscriber."