If you're working on #ActivityPub, I *highly* recommend the new draft report on using HTTP Signature and ActivityPub by @snarfed.org and @nightpool . This draft just hit the stands this week, and it's a really complete coverage of the topic.

https://swicg.github.io/activitypub-http-signature/