Misconception: KERI Needs a Central Registry

Misconception: "Someone still has to issue or own your KERI identity."

In many digital identity systems, a platform, issuer, registry, or identity provider controls the account. KERI starts from a different root: an autonomic identifier (AID) is self-certifying, derived from cryptographic material controlled by the identifier's controller.

Summary

What the clips cover

• Thomas Mayfield - tenant vs owner. Traditional accounts and certificates can disappear when a platform, issuer, or registry changes the rules. KERI roots identity in keys you control.
• Thomas Mayfield - self-certifying identifiers. The identifier is derived directly from cryptographic keys, so no registrar has to grant it.
• Thomas Mayfield - portable trust. KERI's AID model makes trust portable across systems instead of bound to a specific platform.
• Samuel Smith - decentralized key management. KERI is decentralized key management infrastructure, not a centralized identity registry.

Why it matters

Registries and issuers can still issue useful credentials about an AID, such as a legal entity credential or government endorsement. But those credentials do not create the AID. The identifier's basic authority comes from cryptographic control and its Key Event Log.

Sources

• The Hitchhiker's Guide to KERI, Part 2
• A Day in your Life with KERI