there is already a system in place to have verified comments
OpenPGP works for near anything
OpenPGP works for near anything
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
But it does get annoying to sign every comment.
-----BEGIN PGP SIGNATURE-----
wsBcBAEBCAAQBQJYNp4wCRCuaVAPm2QoyQAAr8sIAHQaE5B+HYdCz6XBrysdHzr4
ykR81zq5TXoMR+/f9UwuSi2I4881H4pEWsN9Fa0/qnpK/asNk+grEaMtB74DOg3p
8Uy3lUvlVglj9QTPZ9Hf90e3HHLOW2OonXitYaf1xPoczIO8NgwwebDDZIVohU4u
4EySOfgbP+VjwGbmtUJFeh0BifGN6b3DtKQrgVziWyumyK3WL9oz1kDAr4s24mCr
227ty9d+7kwtYhaszkM8HwGnstZaNSan1jpVkmsLRMSr4JqNFyNWalN5LU85w2WV
zwY0n8mA7tHnrCd+mWcjp845I8gGn7NoFPHXhG2m+yU/f1LDsyXUib5hut+iduQ=
=jcN5
-----END PGP SIGNATURE----- ${message}
${message sig metadata}
${message sig}
I know its considered wrong to mess around with the structure, but this is reversible, looks neater, n' can be hidden (after verification) by third party tools with a simple "is this PGP-like, if yes, delete element" instead of mucking around, splitting arbitrary html