Trust & privacy

Why diplom.mn can be relied on: where data is held, who attests to what, and how anyone can check a credential independently.

The chain of trust

Education records database

The authoritative source for graduation records — every issuance is reconciled against it.

diplom.mn

Issues and signs the credential under dual control, where the person who submits is never the person who approves.

Public proof

A cryptographic digest is written to a public network each day, and anyone can check it.

Where is your data held?

In a Mongolian data centre (protected)

  • Personal data and the full contents of the diploma
  • Signed digital credentials (VCs)
  • PDF copies and QR links
  • A tamper-evident record of every action

On the public network (visible to everyone)

  • Only one combined cryptographic digest (hash) per day
  • Personal data, names and numbers — NEVER placed there
  • The original data cannot be reconstructed from the digest

How does verification work?

  1. Check the signature — proves cryptographically that the credential was signed with the official diplom.mn key and has not been altered.
  2. Reconcile with the source — keeps the evidence of the check made against the official education records at the time of issuance.
  3. Check the status — checks the public status list to see whether the credential has been revoked.
  4. Public proof — proves mathematically that the credential's digest was part of that day's public record.

What if the system is down?

An already-issued credential can still be verified even when the diplom.mn servers are unavailable: the digital credential in your hands plus the proof on the public network are enough on their own. A network outage never amounts to a verdict of “forged” — in that situation the result is reported honestly as “unable to verify”.

For the technically minded

Issuer identifier
did:web:diplom.mn
Credential standard
W3C Verifiable Credentials 2.0 · DataIntegrityProof (ecdsa-jcs-2019)
Status list
W3C Bitstring Status List
Public proof
A daily Merkle root, written to a tamper-evident record on Ethereum L1

It can be checked independently with an open verifier — the verification page offers an “Upload a VC file” option.