did:plc
Protocolo de Identidade
Empresa
Detalhes
Licença Permissive (dual MIT / Apache-2.0, at the user's option; copyright 2022-2026 Bluesky Social PBC). https://github.com/did-method-plc/did-method-plc (TypeScript reference implementation and directory server); https://github.com/did-method-plc/go-didplc (Go implementation, Apache-2.0)
Status de Dev 🟢 Ativo
Proprietário Bluesky Social PBC (original developer, 2022; copyright holder of the reference code); the PLC Organization, a small Swiss association founded in 2026, as neutral steward
Proprietário - Lista
- Bluesky Social PBC
Órgão de Governança PLC Organization (Swiss association, founded 2026, developing its policies) as neutral steward; Bluesky Social PBC as the original developer. The cited sources do not say who operates the directory at plc.directory today or how the steward is governed
País Switzerland (the PLC Organization, a Swiss association with a registered address in Zug)
Ano de Início 2022
Stack TypeScript (reference library and directory server) and Go; DAG-CBOR operations with CIDs; ECDSA-SHA256 over secp256k1 or P-256; did:key encoding of keys; HTTP API described by an OpenAPI schema
Financiamento Not stated by the project.
Última Investigação 29 de out. de 2026
Protocolo de Identidade Atributos
Proprietário - Lista
- Bluesky Social PBC
Origens Account identity for the AT Protocol: a persistent identifier that lets accounts keep their relationships while changing names or moving between service providers, with cryptographic control by the account holder, no blockchain, and cheap, fast, recoverable updates
Banco de Dados A central directory server holding each identifier's append-only operation log, with the full history publicly readable and exportable
Linguagem de Consulta HTTP resolution at plc.directory (the DID document, current data, and the audit log per DID) and a paginated export of all operations
Formatos de Dados Signed operations as DAG-CBOR for hashing and signing and as plain JSON over HTTP; rotation and signing keys as did:key; rendered as a W3C DID document; identifier is 24 base32 characters of the SHA-256 of the genesis operation
Suporte Móvel Library-level only: it is an identifier layer used by atproto applications and has no app of its own
Suporte Web Yes: public HTTPS resolution at plc.directory, a lookup page and API documentation
Aplicativos Nativos None: an identifier method, not an application
Termos Free to use; the project calls it inexpensive enough to provide as a no-cost service
Fundos
Baseado Em W3C DID Core, did:key, DAG-CBOR and CIDs, ECDSA over secp256k1 and P-256
Permissões Cryptographic capabilities: only holders of a current rotation key can update an identifier, with priority order deciding disputes; creation and resolution are open to anyone
Autenticação e Identidade Self-certifying identifier plus rotation keys: the holder (or a service the holder trusts) signs operations with a rotation key; separate signing keys, handles and service endpoints are carried as data. Handles and service claims are not cross-checked by the directory and must be verified bi-directionally by the application
Modelo de Armazenamento Centralized log: the directory server stores every operation permanently with a server timestamp and serves it publicly; clients can verify the log themselves because it is self-certifying
Interoperabilidade Registered W3C DID method, listed in the DIF Universal Resolver's driver table, with a Go implementation beside the reference code; used by the atproto ecosystem. No use outside atproto was found in the cited sources
Portabilidade de Dados Strong at the identity level: the identifier is independent of any one service provider, and the holder can move between providers while keeping relationships. Dependent on the directory for ordering and resolution
Governança e Tomada de Decisão The specification is maintained in the open repository by its developers; the neutral steward is meant to oversee the system, with changes promised to be backwards compatible. Its decision process is not described in the cited sources
Maturidade / Padronização do Protocolo Specification v0.3.0 (December 2025), registered in the W3C DID Extensions registry, in production at atproto scale; not a standards-body deliverable, and the neutral steward was founded only in 2026
Padrões de Identidade W3C DID Core (implements the standard); did:key; registered in the W3C DID Extensions registry
Padrões de Identidade - Lista
Métodos DID Suportados did:plc (defines this method); keys are expressed as did:key
Métodos DID Suportados - Lista
Gestão de Chaves Up to five priority-ordered rotation keys (secp256k1 or P-256), kept apart from signing keys by recommendation; control and recovery rest on them, and keys may be reused across accounts
Tipos de Credenciais N/A: a DID method; it defines no credential types
Tipos de Credenciais - Lista
Método de Verificação The log is self-certifying: a verifier checks each operation's signature against the previous operation's rotation keys and the hash chain; trust in the directory is limited to refusing operations and choosing between forks
Recursos de Privacidade Limited by design: the full operation history, with timestamps, is permanently public even after deactivation, so personal information placed in aliases stays visible and key reuse can link accounts
Métodos de Autenticação Operations signed with rotation keys; atproto separately uses a signing key listed in the identifier's data
Mecanismo de Revogação Update operations rotate or remove keys; a tombstone operation permanently deactivates the identifier (subject to the recovery window); the history is kept
Tipos de Agentes Suportados Individuals and organizations; the page says "individuals (or organizations)"
Tipos de Carteira/Cliente Libraries and atproto software; no method-specific wallet
Mecanismos de Recuperação A higher-priority rotation key can overwrite operations signed by a lower-priority one within 72 hours, which is the recovery path when a lower key is compromised
Conformidade / Regulamentações
Protocolos de Troca de Credenciais N/A: identifier layer; used inside atproto's own protocols
Protocolos de Troca de Credenciais - Lista
Estrutura de Confiança Cryptographic verification of a public log plus trust in one directory for availability and fork ordering; neutral stewardship by the PLC Organization is the stated direction
Modelo de Custo Free to resolve and register
Resistência à Censura Moderate to low: anyone can submit signed operations and the log is verifiable, but a single directory server can refuse operations or serve the wrong fork, and no alternative directory is described
Relacionamentos
Como esta ferramenta se conecta a outras ferramentas e organizações, a partir de relacionamentos revisados pelo responsável pelos dados do OpenHaven. Descrevem como os projetos se conectam, não a qualidade deles.