2018-11-06 UTC
# 
zzo38 The document for HTTP signatures says that 401 error and WWW-Authenticate header is used to specify the details of that error message, if that is the kind of authentication that is needed. (Although 401 error code is used for any needing authentication I should think, including Basic and Digest)