I am wondering about this too. The spec says: > Because DIDs reside on a distributed ledger, each entity may serve as its own root authority—an architecture re

I am wondering about this too. The spec says: > Because DIDs reside on a distributed ledger, each entity may serve as its own root authority—an architecture referred to as DPKI [0] (decentralized PKI). There is a whole bunch of related docs in the WebOfTrust github repo's, many of which are related to blockchain (which does not have my interest, ATM). The spec continues: > Note that DID methods may also be developed for identifiers registered in federated or centralized identity management systems. For their part, all types of identifier systems may add support for DIDs. This creates an interoperability bridge between the worlds of centralized, federated, and decentralized identifiers. Then later on there is a chapter on DID Resolvers [1] but this does not have much detail. So, I guess, the actual resolving mechanisms are out of scope of the spec. [0] https://github.com/WebOfTrustInfo/rebooting-the-web-of-trust/blob/master/final-documents/dpki.pdf https://github.com/WebOfTrustInfo/rebooting-the-web-of-trust... [1] https://w3c-ccg.github.io/did-spec/#did-resolvers https://w3c-ccg.github.io/did-spec/#did-resolvers