HTTP Message Signatures

This site allows you to try out HTTP Message Signatures (RFC9421) interactively. This page works in two modes: signing and verifying, both working in four steps. To sign, add an HTTP message to the form, choose which components should be signed, choose the signing key and algorithm, and view the signed results. To verify, add a signed HTTP message to the form, choose which signature to verify, supply the verification key material, and verify the results. You can also find a list of implementations of the specification in a variety of languages.