Date is not a mandatory header
According to IETF specs Date is suggested but not mandatory:
2.3. Signature String Construction
In order to generate the string that is signed with a key, the client MUST use the values of each HTTP header field in the
headersSignature parameter, in the order they appear in theheadersSignature parameter. It is out of scope for this document to dictate what header fields an application will want to enforce, but implementers SHOULD at minimum include the request target and Date header fields.
https://tools.ietf.org/html/draft-cavage-http-signatures
There is a failing test on this build, see https://travis-ci.org/99designs/httpsignatures-go/jobs/222067374
Sadly our org policy breaks the travis hooks that updating the build status in PR.