[aethertron]

Could it be done in a non-spoofable, decentralised way?

Xanadu is/was specified to include user authentication. No idea about the implementation there.

[jamesgeck0]

Yes. Mozilla Persona was explicitly designed with the intent of having auth as a feature in every browser.