Module agree 

Cross-checking com.atproto.server.describeServer against the DID document.

This is not a second proof of anything – TLS already is the proof, and the DID document is the first unauthenticated read of “who does this hostname say it is.” What this adds is a second, independent unauthenticated read of the same fact, from a different route (an XRPC query rather than a static well-known document), and a refusal to write anything if the two disagree. describeServer answers unauthenticated and unaffected by the server’s own claim state, specifically so this can be checked before a server is claimed.

Structs

DescribeMismatch

Why the two unauthenticated reads of the server’s identity disagreed.

Functions

describes_same_server

Whether describeServer’s answer and the DID document name the same server: the same DID, or a host whose name sits under the server that describes itself.

hosted_by 🔒

Whether subject is an account on the server server names: both are did:web, and the subject’s hostname sits strictly below the server’s.