Comment Comment by danabramov >Yes but if I've already hijacked the DNS to point to my own DID, what's stopping me from saying I go by your handle?The process of establishing "this handle points to this DID" consists of:1. Resolving handle -> DID via HTTPS/DNS (part you're concerned about)2. Downloading the DID Document from its host3. Verifying that the DID Document contains the same handleHijacking the DNS does not help you with (2) and (3). The handle isn't considered associated with the DID until (2) and (3) are done. parent danabramov 1 year ago
The process of establishing "this handle points to this DID" consists of:
1. Resolving handle -> DID via HTTPS/DNS (part you're concerned about)
2. Downloading the DID Document from its host
3. Verifying that the DID Document contains the same handle
Hijacking the DNS does not help you with (2) and (3). The handle isn't considered associated with the DID until (2) and (3) are done.