did:webvh

Protocolo de Identidade

A W3C DID method that extends did:web with cryptographically verifiable history, self-certifying identifiers (SCIDs), and key pre-rotation. Every DID version is cryptographically chained to its predecessor through a signed DID log; updates require signatures from authorized keys. A did:webvh URL is backwards-compatible with did:web (resolve in "legacy mode" by dropping the "vh" and SCID segment) while providing enhanced trust guarantees when resolved natively. Incubated at DIF Identifiers & Discovery Working Group; v1.0 released 2025 with three complete implementations.

Comunidade
Links
Visitar Website Ver esta ferramenta no grafo Sugerir uma correção

Detalhes

Licença Permissive (Apache-2.0); https://github.com/decentralized-identity/didwebvh — specification; https://github.com/decentralized-identity/didwebvh-ts — TypeScript; https://github.com/decentralized-identity/didwebvh-server-py — Python; Rust implementation donated by Affinidi
Status de Dev 🟢 Ativo
Detalhe do Status de Dev Released (v1.0 specification at identity.foundation/didwebvh; three complete implementations: TypeScript (didwebvh-ts), Python (didwebvh-server-py), Rust (donated by Affinidi); Dockerized installation option; deployed in Swiss swiyu national trust infrastructure)
Proprietário Decentralized Identity Foundation (DIF) — Identifiers & Discovery Working Group; specification co-created by Stephen Curran (BC Government) and John Jordan; originally incubated as did:tdw (Trust DID Web) at BC Government
Proprietário - Lista
  • Decentralized Identity Foundation
Órgão de Governança DIF (Identifiers & Discovery Working Group)
País International (DIF is globally distributed; incubated by Government of British Columbia, Canada; now DIF-governed)
Ano de Início 2023
Stack Language-agnostic specification; implementations in TypeScript (Bun/Node.js), Python (FastAPI), Rust; HTTPS for DID document hosting; JSON-LD for DID documents
Financiamento Foundation / Government (DIF member funding; original incubation by Government of British Columbia; ongoing development by DIF I&D Working Group contributors)
Financiamento - Lista
  • Decentralized Identity Foundation
Última Investigação 1 de jul. de 2026

Visão de topologia

Esta ferramenta no centro e o que se relaciona diretamente com ela. Cada linha nomeia o tipo de relação.

Visão de topologia: did:webvhEsta ferramenta no centro e o que se relaciona diretamente com ela. Cada linha nomeia o tipo de relação.did:webvhdid:scid (Base de, Primitiva de identidade para, Interopera com, Requerido por)did:sciddid:vh (Base de, Interopera com)did:vhdid:web (Baseado em, Primitiva de identidade para, Identifica-se via, Interopera com)did:webOpenVTC (Base de, Implementações em conformidade, Primitiva de identidade para, Interopera com, Protocolo falado por)OpenVTCKERI (Ponte de)KERIDIDs (Está em conformidade com, Primitiva de identidade para, Fala o protocolo)DIDsVCs (Está em conformidade com)VCsDecentralized Identity Foundation (Desenvolvido por, Financiado por)DecentralizedIdentity Fou…Keyring (Primitiva de identidade para)KeyringDIDComm (Fala o protocolo)DIDCommJSON-LD (Fala o protocolo)JSON-LDOpenID for Verifiable Credentials (OpenID4VC) (Fala o protocolo)OpenID forVerifiable C…
  • did:scid (Ferramenta): Base de, Primitiva de identidade para, Interopera com, Requerido por
  • did:vh (Ferramenta): Base de, Interopera com
  • did:web (Ferramenta): Baseado em, Primitiva de identidade para, Identifica-se via, Interopera com
  • OpenVTC (Ferramenta): Base de, Implementações em conformidade, Primitiva de identidade para, Interopera com, Protocolo falado por
  • KERI (Ferramenta): Ponte de
  • DIDs (Ferramenta): Está em conformidade com, Primitiva de identidade para, Fala o protocolo
  • VCs (Ferramenta): Está em conformidade com
  • Decentralized Identity Foundation (Organização): Desenvolvido por, Financiado por
  • Keyring (Ferramenta): Primitiva de identidade para
  • DIDComm (Ferramenta): Fala o protocolo
  • JSON-LD (Ferramenta): Fala o protocolo
  • OpenID for Verifiable Credentials (OpenID4VC) (Ferramenta): Fala o protocolo

Abrir no Explorador de grafo

Domínios de Caso de Uso

Identidade e Confiança

Capacidades

Identidade soberana Portabilidade do grafo de confiança

Protocolo de Identidade Atributos

Proprietário - Lista
  • Decentralized Identity Foundation
Origens DID ecosystem / enterprise identity (motivated by did:web's lack of verifiable history and self-certification; designed as a "grown-up" production-grade upgrade to did:web with cryptographic provenance and key rotation without ledger dependency)
Banco de Dados N/A (DID log stored as append-only file at well-known HTTPS URL; no database required by spec)
Linguagem de Consulta DID URL resolution (standard W3C DID resolution via HTTPS; DID log fetched and verified client-side)
Formatos de Dados W3C DID Document (JSON-LD); DID Log (append-only JSON Lines file of signed DID document versions); data integrity proofs per version
Suporte Móvel Library-level (TypeScript and other SDKs usable in mobile environments; no dedicated mobile app)
Suporte Web Yes (HTTPS-based DID document hosting; standard web infrastructure)
Aplicativos Nativos Library-level (embedded in DID resolver libraries and server implementations; no standalone app)
Termos Free / Open standard (Apache-2.0; no fees)
Financiamento - Lista
  • Decentralized Identity Foundation
Fundos Unknown (DIF member contributions; BC Government R&D investment not separately disclosed)
Baseado Em W3C DID Core specification; did:web (backwards-compatible upgrade); SCID (self-certifying identifier derived from genesis state); data integrity proofs; JSON Lines log format
Permissões Cryptographic Capabilities (key control determines update permissions; multi-key authorization possible; no ACL)
Autenticação e Identidade Self-certifying DID (SCID derived from initial DID document state; full cryptographic key history verifiable from log; backwards-compatible did:web resolution)
Modelo de Armazenamento Web-hosted (DID log stored at well-known URL alongside DID document; standard HTTPS hosting; no blockchain or distributed ledger required)
Interoperabilidade W3C DID ecosystem (any DID consumer); backwards-compatible with did:web (legacy mode resolution); Swiss swiyu national trust infrastructure deployment; Hyperledger ACA-py integration
Portabilidade de Dados Full portability (DID can be moved to new HTTPS host via portability mechanism; SCID and history preserved; key rotation supported without identity loss)
Governança e Tomada de Decisão Foundation-governed (DIF Identifiers & Discovery Working Group; DIF membership governance)
Maturidade / Padronização do Protocolo Community Standard (v1.0 released 2025; three complete implementations; DIF Identifiers & Discovery Working Group; deployed in Swiss national infrastructure; Apache-2.0; not yet submitted to W3C DID Methods Registry as a formal W3C standard)
Padrões de Identidade W3C DID Core 1.0; W3C Data Integrity; SCID (Self-Certifying Identifier); compatible with W3C Verifiable Credentials
Padrões de Identidade - Lista
Métodos DID Suportados did:webvh (defines this method); backwards-compatible with did:web
Métodos DID Suportados - Lista
Gestão de Chaves User-controlled with pre-rotation (authorized keys listed in DID log; key rotation recorded as new signed log entry; pre-rotation commitments supported for forward security)
Tipos de Credenciais N/A (DID method specification; compatible with any W3C VC issued against did:webvh identifiers)
Tipos de Credenciais - Lista
Método de Verificação Cryptographic signature verification (each DID log entry carries data integrity proof signed by authorized key; full history verifiable from SCID genesis; no external trust anchor required)
Recursos de Privacidade Minimal (web-hosted DID is publicly discoverable; SCID enables portable history without exposing private keys; no ZKP features in base spec)
Métodos de Autenticação Cryptographic signatures (DID-based key control; standard DID authentication challenge-response)
Mecanismo de Revogação Key rotation via DID log (new log entry with updated keys signed by currently authorized key; revoked keys removed from active verification methods; history preserved immutably)
Tipos de Agentes Suportados Humans (individuals), Organizations, Services/APIs, Devices/IoT — any entity with HTTPS hosting capability
Tipos de Carteira/Cliente SDK/Library integration (TypeScript, Python, Rust libraries); server-side implementations; compatible with standard W3C DID wallets and agents
Mecanismos de Recuperação Pre-rotation / Key history (recovery via pre-committed rotation keys; M-of-N multisignature possible via DID document configuration)
Conformidade / Regulamentações eIDAS-aligned (Swiss swiyu national trust infrastructure deployed did:webvh for eIDAS-compatible national identity; GDPR-compatible via standard HTTPS infrastructure)
Protocolos de Troca de Credenciais Compatible with DIDComm, OIDC4VC, ACA-py / Hyperledger Aries; any protocol supporting W3C DID resolution
Protocolos de Troca de Credenciais - Lista
Estrutura de Confiança Cryptographic verification (no external trust anchor required beyond HTTPS; optional governance layer via trust registries for ecosystem deployments)
Modelo de Custo Free (no blockchain fees; standard HTTPS hosting costs; open source libraries)
Resistência à Censura Service provider dependent (relies on HTTPS hosting; DID owner controls the hosting; portability mechanism allows migration if host becomes unavailable; not as censorship-resistant as blockchain-anchored methods)

Relacionamentos

Como esta ferramenta se conecta a outras ferramentas e organizações, a partir de relacionamentos revisados pelo responsável pelos dados do OpenHaven. Descrevem como os projetos se conectam, não a qualidade deles.

Baseado em
Desenvolvido por
  • Decentralized Identity Foundation
Está em conformidade com
Fala o protocolo
Financiado por
  • Decentralized Identity Foundation
Identifica-se via
Interopera com
Base de
Implementações em conformidade
Ponte de
Primitiva de identidade para
Protocolo falado por
Requerido por