Interesting. He just points out that PGP sig verification will work just fine if you get the correct ascii armor header/footer lines in there. He puts the first inside an HTML comment and the latter inside a PRE.

So, stuff before and after the signed parts are not checked.

I don't plan, at its simplest, to do anything much more elaborate than that. But I'll have a Perl script to automate it.

—John