TLDR: buf will contain the raw message.
If you were not using buf (short for buffer), a korean/french/german streamer with a localized display name or title written in French/German etc using u with umlauts, for example ä, ö, ü
Then the content would be encoded different and you would get a different verification result and your generated verficiation won’t match the one Twitch sent