w3c-ccg / did-spec

Please see README.md for latest version being developed by W3C DID WG.
https://w3c.github.io/did-core/
Other
124 stars 45 forks source link

[Overview] DIDs by themselves cannot authenticate anything #116

Closed mwherman2000 closed 5 years ago

mwherman2000 commented 5 years ago

In https://w3c-ccg.github.io/did-spec/#overview, it states:

The entities are identified by decentralized identifiers (DIDs). They may authenticate via proofs (e.g., digital signatures, privacy-preserving biometric protocols, etc.).

Questions/Comments

  1. If DIDs are identifiers (i.e. character strings), a character string is not able to authenticate anything.
  2. What does "entities" refer to? This is vague. What are these "entities" in real-life? ...in a DID data model, what/where are these "entities"? For example, do we need to specifically identify/call out the concept of a DID Entity?

For example, checkout Hyperledger Indy/Sovrin Comprehensive Architecture Reference Model (INDY ARM) - latest version - bullets (12) thru (16) in both the diagram, Narration, and principles.

Remove or update the sentence "They may ....".