Here's a primer on the basic idea: https://blog.codesolvent.com/2015/07/why-not-signed-password...