kb-fediverse-http-signatures

Explain Fediverse HTTP Signatures for signing and verifying ActivityPub requests.

9|Updated Mar 12, 2026
One-click install
npx skills add https://github.com/reiver/vibefed --skill kb-fediverse-http-signatures
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: kb-fediverse-http-signatures
Source: https://github.com/reiver/vibefed/tree/main/skills/kb-fediverse-http-signatures
Command: npx skills add https://github.com/reiver/vibefed --skill kb-fediverse-http-signatures

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the complexities and interoperability issues surrounding HTTP Signatures, the primary authentication mechanism for server-to-server communication in the Fediverse. It helps developers understand, implement, and debug signature verification failures.

Core Features & Use Cases

  • Authentication & Verification: Provides detailed guidance on signing and verifying HTTP requests using RSA keys.
  • Interoperability Guidance: Documents common quirks, bugs, and best practices across various Fediverse implementations (Mastodon, GoToSocial, etc.).
  • Use Case: Debugging why your Fediverse server cannot federate with another instance by analyzing signature verification failures, clock skew issues, or incorrect header formatting.

Quick Start

Use the kb-fediverse-http-signatures skill to understand how to verify an incoming ActivityPub request's signature.

Frequently Asked Questions about kb-fediverse-http-signatures

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I verify an HTTP Signature for an incoming ActivityPub request?

Debugging Fediverse federation failures involves analyzing HTTP Signature verification errors, resolving public key management issues, correcting header formatting, and addressing interoperability quirks across different server implementations.

How do I sign outgoing HTTP requests for Fediverse server-to-server communication?

Debugging Fediverse federation failures involves analyzing HTTP Signature verification errors, resolving public key management issues, correcting header formatting, and addressing interoperability quirks across different server implementations.

Why does my ActivityPub server fail to federate with Mastodon or GoToSocial instances?

Debugging Fediverse federation failures involves analyzing HTTP Signature verification errors, resolving public key management issues, correcting header formatting, and addressing interoperability quirks across different server implementations.

What is the best way to handle public key resolution for ActivityPub HTTP Signatures?

Debugging Fediverse federation failures involves analyzing HTTP Signature verification errors, resolving public key management issues, correcting header formatting, and addressing interoperability quirks across different server implementations.

What are common limitations when implementing HTTP Signatures for Fediverse interoperability?

Debugging Fediverse federation failures involves analyzing HTTP Signature verification errors, resolving public key management issues, correcting header formatting, and addressing interoperability quirks across different server implementations.