@PuercoPop I think HTTP signatures are not good for that, but you can put a signature inside an activity:
https://fediverse.codeberg.page/fep/fep/8b32/
"integrity proofs" proposed in this document use JSON Canonicalization Scheme, which is not whitespace-sensitive.