did:webvh
did:webvh, DID Web with Verifiable History, is a successor to did:web that resolves the same way, from a DID document hosted on an HTTPS domain, but adds a hash-chained log of every prior version of the document, so a DID document can no longer be silently rewritten.
Every update to a did:webvh document is appended to a verifiable history log, cryptographically chained to the entry before it, so anyone resolving the DID can check the full sequence of changes rather than trusting only the latest snapshot. The method also supports key pre-rotation, where the next signing key is committed to in advance so a future rotation cannot be forged even if the current key is later compromised, and witnesses, independent parties that co-sign updates to make it harder for a single compromised party to rewrite history unnoticed.
Related terms
What does did:webvh add over did:web?
did:webvh keeps the same HTTPS-hosted resolution as did:web but adds a tamper-evident, verifiable history log of every document version, plus key pre-rotation and witnesses, so past states of the DID document can be checked and a single point of compromise cannot rewrite history unnoticed.