paste raw email and DKIM public key · relaxed canonicalization · body bh hash · WebCrypto RSA verify · runs locally
include entire message so body hash (bh=) can be computed