SolidusBeta
Security & trust

We route ciphertext we can't read.

Encryption is the headline here, not the fine print. The mediator forwards JWE ciphertext it cannot decrypt, its own identity resolves on-chain, and delivery can require a verified credential — cryptographic proof standing in for a compliance badge we haven't earned.

Read the docsReport an issue
What's actually true

Four claims, each one checkable.

No throughput or uptime figure here doubles as a security story. These are the mechanisms, with what they look like on the wire.

Encrypted in transit (JWE)

The relay routes ciphertext it cannot read. There is no plaintext access, no message-body storage, no content column in our console. Zero-knowledge to the mediator.

envelope on the wire
{
  "protected": {
    "alg": "ECDH-ES+A256KW",
    "enc": "A256GCM",
    "typ": "application/didcomm-encrypted+json"
  },
  "recipients": [
    { "header": { "kid": "did:solidus:z6Mk…#key-1" } }
  ],
  "iv": "9f2Ka7XrT2mYbGd4NsLuP0oQ",
  "ciphertext": "8Jk2p9WsE4…(sealed)…QzT4Yb3xVe5W",
  "tag": "wQtU0S1caK5JzYxV2"
}

Chain-anchored mediator identity

The mediator has its own did:solidus, verifiable on-chain. Agents discover the real endpoint cryptographically — phishing-resistant mediator discovery no off-chain registry offers.

mediator diddid:solidus:z6MkrQT4…Se1RmF
endpointhttps://relay.solidus.network/didcomm
resolvedblk #4,827,391

Credential-gated delivery

Require a verified credential to accept mediation or delivery, checked against verify.solidus.network. Selective-disclosure (BBS+) supported.

Gate: passSolidusKYCCredential · selective (BBS+)

Per-DID rate limiting

Message-flooding protection. Per-DID limits and burst controls keep one abuser from drowning a recipient's queue.

60msg/min per DID·burst90
No plaintext accessSelf-hostableResponsible disclosureReproducible builds

No SOC 2, ISO 27001, or audit badge below — none has been earned yet. The signals above are real and checkable today.

The signature

A mediator identity you can check yourself.

Not an analyst logo — a did:solidus document resolved from the chain at a specific, citable block.

Mediator identity
did:solidus:z6MkrQT4pWnvKb8sVdE2mHhXNfJcyLu3gA9tCiDoZxSe1RmF
verifiable on-chainblk #4,827,391https://relay.solidus.network/didcomm

Read the protocol. Verify the identity.

The docs cover the full DIDComm v2 sequence; the mediator DID above is checkable on-chain today.

Read the docsReport an issue