@massicotte.org Hmm… if I’m reading this correctly, I’m afraid you’ve only covered about half of it 😅 There are two possible ways to verify a handle (assign it to a DID), via DNS or via .well-known, and two types of DIDs, did:plc and did:web, where the latter is looked up on a custom domain and not plc directory…