Sorry, to clarify, I meant mastodon.social is now verifying signatures from remote instances that sign using RFC 9421, @silverpill.
Signing requests is still pending. Unfortunately that seems to have slipped from 4.5.
I configured a debug log to check whether my signature is verified using RFC 9421. So far, Mastodon (for instances that turned the feature on), WordPress and Mitra :-).