did:web
Protocolo de Identidad
Comunidad
Detalles
Licencia Open specification (W3C CCG / DIF document licence); implemented in every significant DID resolver library under permissive licences
Estado de Desarrollo 🟢 Activo
Propietario W3C Credentials Community Group / DIF — specification contacts listed in the W3C registry are Oliver Terbu, Mike Xu, Dmitri Zagidulin and Amy Guy
Propietario - Lista
- Decentralized Identity Foundation
- World Wide Web Consortium
Órgano de Gobierno W3C Community Group (Credentials Community Group) | DIF
País International (W3C CCG and DIF participation; contributors across the USA, Europe and the UK)
Año de Inicio 2019
Stack Language-agnostic specification; resolution is an HTTPS GET plus a path transformation, implementable in any language in a few lines
Financiamiento N/A — no infrastructure or funding required beyond ordinary web hosting
Última Investigación 31 jul 2026
Protocolo de Identidad Atributos
Propietario - Lista
- Decentralized Identity Foundation
- World Wide Web Consortium
Orígenes Self-sovereign identity / enterprise adoption — created to remove the infrastructure barrier to DID adoption by reusing the web PKI and DNS that organizations already operate
Base de Datos N/A — the DID document is a static JSON file served over HTTPS; storage is whatever the controller's web host provides
Lenguaje de Consulta HTTPS GET — resolution is a deterministic transformation of the DID into a URL, followed by an ordinary web request
Formatos de Datos W3C DID Document as JSON or JSON-LD, served at /.well-known/did.json or at a path derived from the DID's optional path components
Soporte Móvil Library-level — implemented inside resolver libraries and wallets; no standalone application
Soporte Web Yes — HTTPS is the entire resolution mechanism; the DID document is an ordinary web resource
Aplicaciones Nativas Library-level — embedded in resolver libraries; no standalone application
Términos Free at the specification level; real cost is domain registration and hosting, which the controller already bears
Fondos N/A
Basado En W3C DID Core 1.0; DNS; HTTPS and the web PKI (certificate authority trust); RFC 8615 well-known URIs
Permisos Web server access control — whoever can write to the hosting path controls the identifier
Autenticación e Identidad Domain-anchored — control of the identifier is control of the domain and its web server. There is no cryptographic binding between the identifier and any key; the keys are simply what the document at that URL says they are
Modelo de Almacenamiento Web-hosted — a static JSON document on the controller's own server or CDN. No replication, no history, no verifiable log of changes
Interoperabilidad Universal within the W3C DID ecosystem; the default assumption in most enterprise deployments. did:webvh (in this file) is backwards-compatible with did:web and can be resolved in legacy mode by dropping the SCID segment
Portabilidad de Datos Poor — the domain is part of the identifier, so the DID cannot be moved to a different host without becoming a different DID. This is the specific limitation did:webvh and did:scid were designed to address
Gobernanza y Toma de Decisiones W3C Credentials Community Group and DIF — open participation and public repository for the specification; each DID document is governed solely by whoever controls the domain
Madurez del Protocolo / Estandarización Registered W3C DID method with the widest production deployment of any method, though the specification remains a community draft rather than a W3C Recommendation. Maturity here is adoption-driven
Estándares de Identidad W3C DID Core 1.0; registered in the W3C DID Extensions methods registry
Estándares de Identidad - Lista
Métodos DID Soportados did:web (defines this method). did:webvh is a backwards-compatible extension that adds verifiable history and self-certification
Métodos DID Soportados - Lista
Gestión de Claves Controller-managed with no verifiable history — keys can be changed at any time by editing the hosted document, but there is no signed log, so a relying party cannot distinguish a legitimate rotation from a compromise or a substitution by whoever controls the host
Tipos de Credenciales N/A — a DID method specification; defines no credential types. Compatible with W3C Verifiable Credentials issued against identifiers of this method
Tipos de Credenciales - Lista
Método de Verificación Whatever the retrieved document asserts — trust is transitive through HTTPS and the CA system rather than being cryptographically self-certifying. There is no proof that the document was authored by any particular key
Funciones de Privacidad Minimal — did:web identifiers are public by construction, human-readable, and tied to an organizational domain, making them inherently correlatable. Unsuitable for pairwise or pseudonymous use
Métodos de Autenticación Cryptographic signature against keys listed in the hosted DID document
Mecanismo de Revocación Document edit or removal — the controller deletes or updates the hosted file. There is no cryptographic revocation record and no history, so past states cannot be verified
Tipos de Agentes Soportados Any key-controlling entity — individuals, organizations, services and devices
Tipos de Billetera/Cliente SDK / library integration — resolver implementations across the SSI tooling ecosystem; no method-specific wallet
Mecanismos de Recuperación Domain control — recovery means regaining control of the domain and the web server; there is no key-based recovery path
Cumplimiento / Regulaciones Widely used in regulated enterprise deployments precisely because it maps onto existing organizational domain governance and audit practice. The specification itself addresses no regulation directly
Protocolos de Intercambio de Credenciales Compatible with DIDComm, OpenID4VC and any W3C DID-resolving protocol; the dominant issuer method in enterprise credential deployments
Protocolos de Intercambio de Credenciales - Lista
Marco de Confianza Web PKI — trust derives from DNS registration and certificate authorities, both of which are hierarchical and centrally administered. This is the method's defining structural property
Modelo de Costos Domain registration plus hosting — recurring, and dependent on continued payment and registrar relationship. Lapse of the registration destroys the identifier
Resistencia a la Censura Low — the weakest on this tab. A registrar, certificate authority, hosting provider, court or state can each independently make the identifier unresolvable, and no fallback exists because the domain is embedded in the DID itself
Relaciones
Cómo se conecta esta herramienta con otras herramientas y organizaciones, según relaciones revisadas por el responsable de datos de OpenHaven. Describen cómo se conectan los proyectos, no su calidad.
- Alojado en
- World Wide Web Consortium
- Desarrollado por
- Decentralized Identity Foundation
- World Wide Web Consortium
- Habla el protocolo
- Se identifica mediante
- Interopera con
- Almacenamiento para
- Implementaciones conformes
- Inspiró a