search

CIRALabs / high-assurance-dids-with-dns

Other
0 stars 1 forks source link

did:web uri enhancements #17

Open trbouma opened 9 months ago

trbouma commented 9 months ago

I did a close read of the IETF URI RFC 3986 and concluded that these two versions of a did:web identifier can be regarded as equivalent URNs: 

did:web:credentials.trustroot.ca:trbouma
did:web:trbouma@credentials.trustroot.ca

For mass adoption I see the latter format being more popular and understandable - e.g., Verify me at: trbouma@credentials.trustroot.ca Note that it is the same static internet identifier (URN) format for email and the same format for lightning addresses. Over time, the mailto: urn got dropped, and I see the same thing happening to "did:web" - people will just say, "you can verify me at trbouma@credentials.trustroot.ca" and knowing that that context is verification (versue email or payment) whatever scheme will be prepended and whatever routine will resolve to get the necessary did material to do the verification.

I have implemented in the latest commit of sandbox and have testing in the scripts/verify_did.py

andrewwhitehead commented 4 months ago

'@' is not allowed by the DID syntax for the method-specific-id: https://www.w3.org/TR/did-core/#did-syntax

It could be percent-encoded, although it becomes less legible: did:web:trbouma%40credentials.trustroot.ca