diff --git a/index.html b/index.html index 79002966..71f760f8 100644 --- a/index.html +++ b/index.html @@ -6006,6 +6006,27 @@
+The DID controller for a DID document might change over time. However, +depending on how it is implemented, a change in the DID controller might +not be made apparent by changes to the DID document itself. For example, +if the change is implemented through a shift in ownership of the underlying +cryptographic keys or other controls used for one or more of the verification +methods in the DID document, it might be indistinguishable from a +standard key rotation. +
++On the other hand, if the change is implemented by changing the value of the +`controller` property, it will be transparent. +
++If it is important to verify a change of DID controller, implementers are advised +to authenticate the new DID controller against the +verification methods in the revised DID document. +
+