Comment by rogerbraun

messages are signed using http signatures (https://tools.ietf.org/html/draft-cavage-http-signatures-09)