Payments and settlement
RFC 9421.
HTTP Message Signatures — the IETF standard for signing HTTP requests and responses.
- STATUS
- Testnet
- CRATE
- tenzro-payments
- STABILITY
- Stable
- REFERENCE
- RFC 9421
01
Scope
Used to sign payment challenges and credentials at the HTTP layer, complementing the inner credential signature. Compatible with the Signature and Signature-Input headers.
02
Components
Covered components include @method, @target-uri, @authority, content-digest, and the inner payment headers.
03
Keys
The HTTP Message Signature is Ed25519 from the agent's MPC wallet, matching the algorithms RFC 9421 defines. Verification keys are resolvable from the agent's DID document. The inner Tenzro credential carried alongside it adds a hybrid Ed25519 + ML-DSA-65 binding, so the credential is post-quantum-bound even though the HTTP-layer signature stays classical.
Related