Hydra Links Cloud May 2026

Every link in the cloud contains nbf (not before) and exp (expiration) claims. Short-lived links (e.g., 1 hour for cloud console access) reduce the blast radius. Additionally, links can be bound to specific TLS channels or device fingerprints.

A Hydra DID can have multiple public keys (call them "heads"). You might have a key for daily cloud access, a key for high-value transactions, and a recovery key stored in a hardware module. If your daily key is stolen, you simply rotate it — issuing a new link from your recovery key. The cloud resolver updates the DID document instantly. The attacker loses access. hydra links cloud

These can be any combination of: