An account has a permanent DID and a human-readable domain handle; the handle resolves to the DID by a DNS TXT record or a well-known file, and the DID document must claim the handle back.

Stable links and portable names rest on this two-way link.

An account has two names. A DID, a decentralized identifier: a permanent id number. And a handle, a domain name: the name tag people read.

Handles can change. The DID never does. Apps use the DID. People use the handle.

A handle points at a DID in one of two ways. A DNS text record, or a small file on the domain's website.

And the DID points back at the handle. Both directions must agree, or anyone could claim a name for someone else's account.

Own a domain, and it can be your handle. The name is yours, not the app's.

Terms. DID: decentralized identifier. The handle is resolved by DNS or HTTPS and must be confirmed in the DID document.

Check yourself. Why must the link between handle and DID be confirmed in both directions?