Eight webhook providers, eight different ways to sign a request

I read the signature specs for Stripe, GitHub, Shopify, Slack, Standard Webhooks, Paddle, Twilio and Telegram. They disagree on almost everything, and two of the disagreements are security-relevant.