Mere hashing indeed wouldn't be useful, but there's SCRAM, and it's standardized as one of HTTP authentication mechanisms (see RFC 7804). Edit: though perhaps

Mere hashing indeed wouldn't be useful, but there's SCRAM, and it's standardized as one of HTTP authentication mechanisms (see RFC 7804). Edit: though perhaps it's worth noting that it won't force a server to store a password securely, but would facilitate it.