This is really confusing. In Section 1.1, it says the DID "did:example:123456789abcdefghijk" resolves to a DID document. Does that mean it uses DNS or similar

This is really confusing. In Section 1.1, it says the DID "did:example:123456789abcdefghijk" resolves to a DID document. Does that mean it uses DNS or similar to resolve "example" to a server that hosts the "123456789abcdefghijk" document? Is "123456789abcdefghijk" used to verify the DID document in some way? For example, is "123456789abcdefghijk" the hash of the DID document, like in a Bittorrent magnet link? Or is "123456789abcdefghijk" the hash of some public key that's signed the DID document? What if the user wants to update their DID document? Can the new DID document be associated with the existing DID "123456789abcdefghijk", or would it get a new DID? Does the DID document ever live on untrusted links or servers? How is it authenticated? If users can upload new DID documents, how can you be sure you're getting the latest version? It also says DID's are a "new type of globally unique identifier" that "enable entities to prove control over them by authenticating using cryptographic proofs such as digital signatures." This sounds a lot like a Bitcoin address or an IPNS name. I wish they'd provide more specific examples.