Don't you offload the authentication to the postal service in this case?