a did:plc PDS in a single page — keys minted in-browser, identity in IndexedDB, served to the relay over a DPoP-authenticated WebSocket back channel.
back channel →
the DID doc's PDS endpoint is set to the relay URL above, so resolvers (e.g. PDSls) route to the relay — and the relay streams to this tab.
did:
handle: · pds:
identity.json holds the signing + rotation private keys (Go-compatible). Keep it safe — pair it with a CAR export to migrate.