Signed & unmodified
A $50,000 services contract delivered exactly as it was signed — the signature matches, the signer resolves over DNS and a trust registry, and the content has not been touched since.
See the valid page →Three pages, three outcomes
Seeing the difference in one click
Below are three versions of the same services contract. They look nearly identical — but one has had its dollar value quietly altered. The verify button tells you which one you can actually rely on.
Tampered after signing
The same contract, but the value was inflated from $50,000 to $50,000,000 after signing. The signature still exists — and verification catches the discrepancy instantly.
See the tampered page →No signature at all
Most pages on the web offer no proof of authorship or integrity. There is nothing cryptographic to check; you simply have to trust the URL bar. That's the status quo.
The rest of the internetWhy it matters
Authenticity that doesn't rely on a gatekeeper
Every signature on this site anchors to a public decentralized
identifier (did:web:jacqueslatour.ca) — which itself
resolves over DNSSEC. No ledger, no blockchain, no account with a
third-party platform. Just math, DNS, and a sidecar file.
-
The page is hashed, then signed
A SHA-256 hash of the page content is signed with an Ed25519 private key (and an ML-DSA-44 post-quantum key). The result lands in a
.vrfysidecar next to the page. -
The signer's public key is published at a DID
The public half of the key is hosted at a public DID document at
/.well-known/did.json, anchored to the site's DNS and TLS certificate. -
Anyone can verify in seconds
A verifier fetches the page and its sidecar, resolves the DID, checks the signature, and confirms the DNS anchor. The result is a cryptographic yes-or-no — not an assertion of trust.