search

w3c-ccg / did-method-web

DRAFT: did:web Decentralized Identifier Method Specification
https://w3c-ccg.github.io/did-method-web/
Other
32 stars 17 forks source link

by creating DID in this method we can verify from third party ?? #65

Closed Muthurajj closed 1 year ago

Muthurajj commented 1 year ago

by creating the DID in WEB method the verifiable credential can be verified from the third party verifiers?? creating DID in web method will visible to verifier to access the VC??

jceb commented 1 year ago

Yes, that is possible. The third party would resolve the did:web DID by requesting the DID document from your web server and then proceed to verify the VC.

Muthurajj commented 1 year ago

thank for the reply, I have some points to clear correct me if wrong 1.I have create http:// .io URL like this then import the DID document in that URL

  1. then create a DID like did:web:: file name
jceb commented 1 year ago

Yes, almost.

a) ensure that your webserver is reachable via HTTPS with a valid certificate, e.g. at https://domainname.io b) the filename that you need to create is did.json including any leading directories, e.g. for DID did:web:domainname.io:myid you HTTPS server would need to serve the DID document at https://domainname.io/myid/did.json. You'll find more examples in the spec.

Muthurajj commented 1 year ago

thank, you to have any idea about the did document structure for did:web method

jceb commented 1 year ago

Take a look at the DID Core Spec

Muthurajj commented 1 year ago

1.In did document we have mentioned the service endpoint , The service endpoint is reference to issuer url ? 2.while verifying the vc the verifier will access the endpoint url to check the credentials ??

Muthurajj commented 1 year ago

Take a look at the DID Core Spec

thanks its very useful.

jceb commented 1 year ago

1.In did document we have mentioned the service endpoint , The service endpoint is reference to issuer url ?

It doesn't have to be the issuer URL it could be any URL.

2.while verifying the vc the verifier will access the endpoint url to check the credentials ??

No, the verification is actually designed to not required a back-channel. For the simple verification of the credential it's enough to have access to the credential and the DID documents of the issuer and the holder/presenter. These documents are cryptographically inter-linked to verify that the issuer made a statement (credential) about the holder. See the VC spec for more details.

Muthurajj commented 1 year ago

The did:web method required any blockchain storage for storing the did??

jceb commented 1 year ago

No, it doesn't.

Muthurajj commented 1 year ago

Thanks for the support @jceb