@jcgregorio points to HMAC as used in http://code.google.com/p/support/wiki/PostCommitWebHooks - wondering about advantages over HTTPdigest?