The entities are identified by decentralized identifiers (DIDs). They may authenticate via proofs (e.g., digital signatures, privacy-preserving biometric protocols, etc.).
Questions/Comments
If DIDs are identifiers (i.e. character strings), a character string is not able to authenticate anything.
What does "entities" refer to? This is vague. What are these "entities" in real-life? ...in a DID data model, what/where are these "entities"? For example, do we need to specifically identify/call out the concept of a DID Entity?
In https://w3c-ccg.github.io/did-spec/#overview, it states:
Questions/Comments
For example, checkout Hyperledger Indy/Sovrin Comprehensive Architecture Reference Model (INDY ARM) - latest version - bullets (12) thru (16) in both the diagram, Narration, and principles.
Remove or update the sentence "They may ....".