High Assurance Identifiers

Full Title or Meme

Before an Identifier can be used for High Assurance Authentication it must be issued by a known issuer to a known device and wallet.

High Assurance DIDs with DNS

An IETF draft RFC method for improving the authenticity, discoverability, and portability of Decentralized Identifiers (DIDs) by utilizing the current DNS infrastructure

• High Assurance DIDs with DNS slide deck from 2024-09

Context

• High Assurance DIDs with DNS
• High Assurance DIDs with DNS - on GitHub

Problems

1. TLSA - with or without Updates by: 7218, 7671, 8749
2. Is this 1-Identifier 2-Authentication 3-Federation, It seems to be mix - perhaps from the view of the verifier - unclear its always good to know who a std is directed at and who must comply with what