Issuer, Holder, Verifier
The three roles in every decentralized identity exchange, often called the trust triangle. The issuer signs and grants a credential, the holder stores it in a wallet and controls presentation, and the verifier checks the signature and status without contacting the issuer in real time.
The triangle is what makes decentralized identity different from federation: the verifier checks a signature rather than calling the issuer, so the issuer does not learn where the credential is used. That removes a surveillance channel and a runtime dependency, and it moves two hard problems onto the verifier: deciding which issuers to trust, and checking revocation without reintroducing the phone-home the model was meant to remove.
See also: verifiable credential, trust registry, revocation registry, what is decentralized identity
Related on Start with Identity
- GlossaryTrust over IP (ToIP)
A Linux Foundation framework that organizes decentralized trust into a dual stack: technology layers (identifiers, credentials, protocols) and governance layers
- GlossaryDigital Identity Wallet
An app or service that stores a holder's decentralized identifiers and verifiable credentials and manages consent when presenting them. Government wallets such
- GlossarySelective Disclosure
Revealing only the minimum claims needed for a transaction, for example proving you are over 18 without sharing your birth date. A core privacy goal of verifiab
- BlogxMoney lets customers create a Mastercard Payment Passkey inside its banking app, a first for an issuer
xMoney says it is the first Mastercard issuer to let customers create and enroll a Mastercard Payment Passkey directly inside its mobile banking app, satisfying