HTTP Message Signatures โ€” RFC 9421

Protects specific message components even through proxies and transformations. Useful for high-integrity requests, webhooks and regulated submission flows; not a full auth story on its own.