Editing Decentralized Identifier (DID)

A '''Decentralized Identifier (DID)''' in the [[AT Protocol]] serves as a persistent, long-term account identifier that enables [[Actor|actors]] to maintain their identity across services and [[handle]] changes. DIDs follow the [[wikipedia:Decentralized_identifier|W3C DID Standard]], which provides a method for self-sovereign digital identity.

DIDs serve as the foundation for identity in the AT Protocol, enabling actors to maintain their identity across handles or service providers, cryptographically verify their content, and migrate between different [[Personal Data Server (PDS)|Personal Data Servers (PDSes)]] while preserving their identity and social graph.

The AT Protocol currently supports two DID Methods:

* '''[[DID:PLC]]''': A novel DID method developed by [[Bluesky Social]], designed specifically for the AT Protocol ecosystem. It provides mechanisms for key rotation, account recovery, and service migration.
* '''[https://w3c-ccg.github.io/did-method-web/ did:web]''': A W3C standard based on HTTPS and DNS, where the identifier section is a [[wikipedia:Hostname|hostname]]. In the AT Protocol, only hostname-level did:web DIDs are supported, not path-based DIDs.

== Structure and Syntax ==
DIDs in the AT Protocol follow the standard DID syntax:<syntaxhighlight lang="text">
did:<method>:<method-specific-identifier>
</syntaxhighlight>For example:

* <code>did:plc:z72i7hdynmk6r22z27h6tvur</code>
* <code>did:web:blueskyweb.xyz</code>

All DIDs must:

* Begin with a lowercase <code>did:</code>
* Use a lowercase method name
* Contain only allowed characters (letters, digits, period, underscore, colon, percent, sign, or hyphen)
* Not end with a colon
* Not include query or fragment components in the AT Protocol context

== DID Documents ==
Each DID resolves to a '''DID Document''' which contains critical information about the actor:

# '''[[Handle]] Association''': The <code>alsoKnownAs</code> array contains the user's handle, allowing human-readable addressing
# '''Verification Method''': The <code>verificationMethod</code> array contains the public signing key used to authenticate the account
# '''Service Endpoint''': The <code>service</code> array specifies the PDS or PDSes hosting the user's repository.

[[Category:Identifiers]]