Reconsider use of DIDComm

[rlin1]

Is a heavy protocol, which in our case is used over HTTPS, so we might just want to use mutual TLS.

[rlin1]

TODO: How would one entity (Issuer, Service Provider) verify that other entity is part of ADIA?

[Louie-Gasparini]

ADIA is a closed network correct? If so, then there should be a directory service that contains valid issuers and service provider keys. With that credentials can be shared between actors with their respective public keys which can be validated from the directory service. ??