-----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA256
    
    But it does get annoying to sign every comment.
    -----BEGIN PGP SIGNATURE-----
    
    wsBcBAEBCAAQBQJYNp4wCRCuaVAPm2QoyQAAr8sIAHQaE5B+HYdCz6XBrysdHzr4
    ykR81zq5TXoMR+/f9UwuSi2I4881H4pEWsN9Fa0/qnpK/asNk+grEaMtB74DOg3p
    8Uy3lUvlVglj9QTPZ9Hf90e3HHLOW2OonXitYaf1xPoczIO8NgwwebDDZIVohU4u
    4EySOfgbP+VjwGbmtUJFeh0BifGN6b3DtKQrgVziWyumyK3WL9oz1kDAr4s24mCr
    227ty9d+7kwtYhaszkM8HwGnstZaNSan1jpVkmsLRMSr4JqNFyNWalN5LU85w2WV
    zwY0n8mA7tHnrCd+mWcjp845I8gGn7NoFPHXhG2m+yU/f1LDsyXUib5hut+iduQ=
    =jcN5
    -----END PGP SIGNATURE-----

    ${message}
    
        ${message sig metadata}
        ${message sig}

I know its considered wrong to mess around with the structure, but this is reversible, looks neater, n' can be hidden (after verification) by third party tools with a simple "is this PGP-like, if yes, delete element" instead of mucking around, splitting arbitrary html