This has been thought about. Digest auth is a thing, but is stuck on MD5. However, with how flexible a web-form is there really is no way to enforce it so idea

This has been thought about. Digest auth is a thing, but is stuck on MD5. However, with how flexible a web-form is there really is no way to enforce it so idea never really went that far.