Identity
did:web
Also known as: did:web method
A W3C DID method that resolves an identifier to a DID document hosted at a well-known HTTPS path on the domain.
did:web is one of the simplest DID methods. A did:web identifier is structured as did:web:<domain> (optionally with path components), and resolution means an HTTPS GET to https://<domain>/.well-known/did.json. Whoever controls the domain controls the DID.
The simplicity is the point. did:web doesn't require a ledger, doesn't incur crypto fees to rotate keys, and is trivially auditable — anyone can inspect the DID document by hitting a URL. The tradeoff is that trust is only as strong as TLS plus domain ownership.
LearnCoin's issuer DID is did:web:learncoin.me. The DID document declares each per-tenant signing key as a verificationMethod fragment with type EcdsaSecp256k1VerificationKey2019. When a credential's proof.verificationMethod references did:web:learncoin.me#tenant-ewance, any verifier can resolve the DID, pull the tenant-specific public key, and check the MerkleProof2019 signature.
did:web is the method the EUDI Wallet Architecture Reference Framework recommends as a baseline because of its operational simplicity and auditability.