Well Known DID Configuration

The Well-Known DID Configuration is a technical specification that enables proving relationships between Decentralized Identifiers (DIDs) and web domains. This standard, developed by the Decentralized Identity Foundation (DIF), provides a mechanism for domain controllers to cryptographically prove they also control specific DIDs through a standardized configuration file and verification process.

The standard establishes a bi-directional trust relationship between traditional web infrastructure and decentralized identity systems through Domain Linkage Credentials, which are verifiable credentials containing cryptographic proofs linking DIDs to specific domains.

Key aspects of the standard:

1. Purpose and Scope:

• Enables proving ownership between web domains and DIDs
• Provides standardized discovery mechanism for DID-domain relationships
• Facilitates integration between traditional web systems and decentralized identity

2. Technical Specifications:

• Configuration file must be served at /.well-known/did-configuration.json
• Uses JSON-LD and JWT formats for credentials
• Supports two proof formats:
  • Linked Data Proof Format
  • JSON Web Token Proof Format

3. Implementation Requirements:

• Must implement standardized verification process
• Must support both credential formats
• Must validate:
  • Credential signatures
  • DID ownership
  • Domain matching
  • Temporal validity

4. Security Considerations:

• Requires secure HTTPS connections
• Enforces cryptographic verification of credentials
• Mandates matching between credential subject and issuer
• Requires validation against DID Documents

5. Interoperability Features:

• Standardized well-known URI location
• Support for multiple credential formats
• Consistent verification process
• LinkedDomains service endpoint for reverse lookup

6. Current Adoption Status:

• Draft specification status
• Under development within DIF
• Intended for IANA registration as Well-Known resource

The standard provides a robust framework for establishing verifiable connections between traditional web infrastructure and decentralized identity systems, enabling important use cases for identity verification and service association.