#2 suggests local network device authentication mechanism that rely on existence of an authentication server on the global network. This is a meta issue to discuss such a server-managed device authentication.
For details of the proposal, see Approach #2 in #2.
Any comments or additional proposals are welcome!