Since there is no IETF standard for signing REST requests and no such activity in progress either, I took the liberty outlining a minimalist proposal: https://github.com/cyberphone/json-canonicalization/blob/master/REST.signatures.md Comments are as always welcome! Anders