How you can authenticate users safely without a backend?

A meetup talk that I gave at Turbine Kreuzberg about the UCAN