Registry

As mentioned here, a DID per web-did specification is resolved to a URL that contains the DID document. Someone could create their own DID by hosting it on their own domain or they could use a registry.

The registry acts as a hosting service for DID documents.

As with any other participant in the Decentrl network, registries can be identified by their DIDs which resolve to their DID documents.

Registry DID example

did:web:registry.decentrl.network

Resolves to this DID document

Creating a new Decentrl identity

Identity can be created by following these steps:

Generating encryption and signing keys

Every Decentrl identity needs encryption and signing keypairs to be able to communicate with mediators and other identities. It uses the EC P-256 curve by default so ECDH and ECDSA keys have to be generated. It is best to keep keys in JWK format, as it will make it easier to use them with JOSE libraries and import them to DID documents.

Generating DID document

Once the keypairs are generated, we can generate a DID document that will be later registered on the registry. The DID document should be generated per web did method specification.

Keep in mind that DID document is public, so only public keys should be included inside it.