@kate_sills I've struggled with this exact thing writing my own documentation for this procedure. I guess one could provide a single script like verify_my_download.sh, but then when that script simply says VERIFIED! how is a regular person supposed to trust that?
Reflecting on the first time I learned about DIDs 5 years ago, at @RWOTEvents 4 in Paris. It was my first time meeting the Decentralized ID/SSI/etc crowd, and I described the need for rotatable cryptographic identifiers 1/n