The report "ActivityPub and HTTP Signatures" was published today.

It documents best practices for how to use HTTP Signatures with ActivityPub.

The content of the report has been available and stable since June 2024, but due to a secretarial error, hadn't been published on the W3C site so far. (Sorry!)

LInk is on under "Final Reports": https://www.w3.org/community/socialcg/