<oembed><type>rich</type><version>1.0</version><title>brockm wrote</title><author_name>brockm (npub1hy…wk7cp)</author_name><author_url>https://yabu.me/npub1hyqrsvl6hle8r5rc9cpshesm0mpcee75tgde4p5lhke5h83dyqqqdwk7cp</author_url><provider_name>njump</provider_name><provider_url>https://yabu.me</provider_url><html>Come to realize one of the reasons people don&#39;t get DIDs, is they think they&#39;re just glorified pubkeys, or they&#39;re glorified decentralized Apple Wallets. This is just a wrong mental model. &#xA;&#xA;The way to think about what DIDs and Verifiable Credentials from an engineering and application developer perspective, is to view them as a wholesale replacement for DNS and Certificate Authorities. They decentralize away from ICANN. &#xA;&#xA;They are a new universal identity layer for the internet. But because they are open an extensible protocols, we can do everything from validate that website is legitimately owned by a company or individual. Or they can be used to model a driver&#39;s license, where a government agency issues the credential. The protocol doesn&#39;t care. &#xA;&#xA;I think people who think they&#39;re &#34;too complex&#34; and add nothing that pubkeys don&#39;t, haven&#39;t thought too deeply about the totality of problem of identity on the internet, and are likely taking DNS (a highly centralized form of identity) for granted. When they probably shouldn&#39;t.</html></oembed>