did:web · RFC 9421
Domain Control (Publisher)
Hosts /.well-known/did.json for did:web and signs KYA Engine domain-control verify requests. Use Credential Verification (Verifier) to check issued agent Verifiable Credentials.
KYA challenge publisher
Update the plain-text domain-control challenge without redeploying this app.
Published to Vercel Blob and available immediately across deployments.
DID Document
Served as
application/did+json for did:web domain control.Key from envEd25519Signing enabled
DID
did:web:dbkyatest.xyz
Public key (multibase)
z6Mkpk6gDjyxjDRxuSkSuT3ityZCGcBvZWzrSYz4xEEHdoMy
did.json
{
"@context": [
"https://www.w3.org/ns/did/v1",
"https://w3id.org/security/suites/ed25519-2020/v1"
],
"id": "did:web:dbkyatest.xyz",
"verificationMethod": [
{
"id": "did:web:dbkyatest.xyz#owner",
"type": "Ed25519VerificationKey2020",
"controller": "did:web:dbkyatest.xyz",
"publicKeyMultibase": "z6Mkpk6gDjyxjDRxuSkSuT3ityZCGcBvZWzrSYz4xEEHdoMy",
"publicKeyJwk": {
"crv": "Ed25519",
"x": "mOUmaqG9Mhemray2AcK-v5WOOHJkm3NdmWjLUz4qbLg",
"kty": "OKP"
}
}
],
"authentication": [
"did:web:dbkyatest.xyz#owner"
],
"assertionMethod": [
"did:web:dbkyatest.xyz#owner"
]
}Public key (PEM)
-----BEGIN PUBLIC KEY-----
MCowBQYDK2VwAyEAmOUmaqG9Mhemray2AcK+v5WOOHJkm3NdmWjLUz4qbLg=
-----END PUBLIC KEY-----KYA domain control (http_message_signature)
Signs
@method, @path, nonce per API 1.13.0 (nonce for control-only, bindingPayload for holder binding). Paste values from your challenge response, then copy the curl to call verify.@method@pathnonce
KYA domain control (did_web_key)
Detached Ed25519 JWS for
instructions.nonce or bindingPayload when holder binding is enabled.HTTP Message Signatures
Generic RFC 9421 playground (not KYA domain-control verify). Use "KYA domain control" cards above for Engine-compatible signatures.