# HTTP Message Signatures with curl

DevFeed: [HTTP Message Signatures with curl](<https://devfeed.tech/articles/http-message-signatures-with-curl-18900.md>)

Original publisher: [Read original article](<https://daniel.haxx.se/blog/2026/07/27/http-message-signatures-with-curl/>)

Author: Daniel Stenberg

Published: 2026-07-27T06:55:03Z

Content type: release

Language: en

Sources: [Daniel Stenberg](<https://devfeed.tech/sources/daniel-stenberg.md>)

Topics: [cURL](<https://devfeed.tech/topics/curl.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>)

Tags: [curl](<https://devfeed.tech/tags/curl.md>), [curl-and-libcurl](<https://devfeed.tech/tags/curl-and-libcurl.md>), [digital-signatures](<https://devfeed.tech/tags/digital-signatures.md>), [ed25519](<https://devfeed.tech/tags/ed25519.md>), [experimental](<https://devfeed.tech/tags/experimental.md>), [git](<https://devfeed.tech/tags/git.md>), [hmac](<https://devfeed.tech/tags/hmac.md>), [http](<https://devfeed.tech/tags/http.md>), [production](<https://devfeed.tech/tags/production.md>), [release](<https://devfeed.tech/tags/release.md>)

## AI overview

curl experimentally supports HTTP Message Signatures based on RFC 9421, allowing users to sign selected HTTP request components with ed25519 or hmac-sha256 through new command-line and libcurl options. The feature must be explicitly enabled, is discouraged for production use, and is planned for curl 8.22.0.

## Source excerpt

The recently published RFC 9421 describes how to do HTTP Message Signatures, and starting just now, curl experimentally supports them. Message Signatures The specification describes this as a mechanism for creating, encoding, and verifying digital signatures or message authentication codes over components of an HTTP message. It is a way to verify that selected parts ... Continue reading HTTP Message Signatures with curl ->