Are We HS2019 Yet?

Tracking adoption of current drafts of HTTP Signatures across the Fediverse.

Service	Library	algorithm="hs2019"	(created) & (expires)	Signature-Input	algorithm	(created) & (expires)	Signature-Input
Service	Library	Accepts			Sends
Mastodon 4.5.2	Linzer	Partial⁵ - Issue	Yes	Yes	rsa-sha256	No	No
Pleroma 2.9.1	pleroma/http_signatures	Partial¹	No - Issue	No	rsa-sha256	No	No
PeerTube 7.3.0	@peertube/http-signature	Partial⁵	Yes	No - Issue	rsa-sha256	No	No
WriteFreely 0.16.0	writeas/httpsig	No - Issue	No	No	rsa-sha256	No	No
Pixelfed 0.12.6	None	Partial¹	No	No	rsa-sha256	No	No
Misskey 2025.11.1	@peertube/http-signature	Partial⁵	Yes	No - Issue	rsa-sha256	No	No
Friendica 2024.12-1	None	Partial⁵	Yes	No	rsa-sha256	No	No
Hubzilla 10.6.1	macgirvin/HTTP-Message-Signer	Yes	No	Yes	rsa-sha256⁴	No	No
Funkwhale 1.4.1	requests-http-message-signatures	Partial²	Yes	No	rsa-sha256	No	No
Plume 0.7.2	None	Partial¹	No	No	rsa-sha256	No	No
Mobilizon 5.2.1	None	Partial¹	No	No	rsa-sha256	No	No
Lemmy 0.19.13	http-signature-normalization	Partial¹	Yes	No	hs2019	No	No
BookWyrm 0.8.2	None	Partial¹	No	No	rsa-sha256	No	No
wordpress-activitypub 7.6.1	None	Yes	Yes	Yes	rsa-sha256	No	No⁴
GNU social 2.0.0beta0	None	Partial¹	No	No	rsa-sha256	No	No
lotide 0.15.0	hancock	Yes	Yes	Yes	hs2019	No	No⁴
Mitra 4.14.0	apx_sdk	Partial³	Yes	Yes	rsa-sha256	No	No⁴

¹ This implementation assumes all signatures use SHA256
² This implementation uses the passed algorithm if known (not recommended by the spec), but falls back to SHA256 if unrecognized, which technically works for current uses of hs2019
³ This implementation assumes all RSA signatures use SHA256
⁴ Available as config option
⁵ This implementation assumes "hs2019" is equivalent to "rsa-sha256", which is not recommended but is technically compatible with current uses of hs2019