DID-METHOD-WEB
DID method DNS HTTPS sans blockchain.
Définition
did:web mecanisme : DID resolution converts did:web:example.com -> https://example.com/.well-known/did.json (root) ou did:web:example.com:user:alice -> https://example.com/user/alice/did.json (path). DID Document hosted HTTPS standardly. Pros : zero blockchain dependency, leverages existing PKI (TLS certificates DV), simple to deploy. Cons : depends on DNS + HTTPS PKI authority, not truly decentralized (DNS registrar power). Adoption croissante : Verifiable Credentials de Microsoft Entra ID, Spruce ID, plate-formes corporate.
Origine
did:web propose Editor's Draft decembre 2019 par Markus Sabadello (Danube Tech) ; widely adopted depuis 2021 ; pas encore formal W3C Recommendation mais largement implementee.
Exemple en contexte
Microsoft Entra ID Verifiable Credentials utilise did:web:contoso.com pour issuer corporate VCs aux employes ; resolution simple DNS Microsoft 365 tenant, sans depender de blockchain.
Termes liés
- W3C DID — standard parent.