Okay, but where is the authentication done, on a remote server, local machine, ...?