web:verify

Summary

web:verify identifies a public backing claim for a web domain by the signing Chronicle pubkey.

Fields

• subject MUST be of type domain_name and identifies the web domain being claimed and backed.
• amount MUST be positive. Its magnitude represents the cost committed to the claim.

Purpose

Publicly claiming and backing a web domain with a Chronicle pubkey.

The claim can be strengthened by the proof-of-control mechanism defined below.

Proof of control

To strengthen a web:verify claim, the domain owner SHOULD serve the same pubkey at:

https://<domain>/.well-known/chronicle-pubkey

The response body SHOULD be a canonical schnorr_pubkey, optionally followed by a trailing newline.

If the pubkey served at that path matches the pubkey that signed the web:verify event, clients may treat that as evidence that the domain is controlled by that pubkey.

If the domain does not serve that path, or serves a different pubkey, the web:verify event remains a public backing claim but without this additional proof of control.

Interpretation

Multiple pubkeys may emit web:verify for the same domain. This kind does not resolve competing claims on its own.

A matching /.well-known/chronicle-pubkey response is stronger evidence than an unmatched competing claim. When no matching proof of control is present, clients may weigh competing claims by the credibility of the specific web:verify events and of the pubkeys that signed them.