@PuercoPop I think HTTP signatures are not good for that, but you can put a signature inside an activity:

https://fediverse.codeberg.page/fep/fep/8b32/

"integrity proofs" proposed in this document use JSON Canonicalization Scheme, which is not whitespace-sensitive.