DID-METHOD-WEB

DNS HTTPS DID method without blockchain.

Definition

did:web mechanism: DID resolution converts did:web:example.com -> https://example.com/.well-known/did.json (root) or did:web:example.com:user:alice -> https://example.com/user/alice/did.json (path). DID Document hosted via HTTPS standardly. Pros: zero blockchain dependency, leverages existing PKI (DV TLS certificates), simple to deploy. Cons: depends on DNS + HTTPS PKI authority, not truly decentralized (DNS registrar power). Growing adoption: Microsoft Entra ID Verifiable Credentials, Spruce ID, corporate platforms.

Origin

did:web proposed Editor Draft December 2019 by Markus Sabadello (Danube Tech) ; widely adopted since 2021 ; not yet formal W3C Recommendation but widely implemented.

Example in context

Microsoft Entra ID Verifiable Credentials uses did:web:contoso.com to issue corporate VCs to employees ; simple DNS Microsoft 365 tenant resolution, without depending on blockchain.

Related terms

• W3C DID — parent standard.