> With public key crypto you can implement a challenge response. Or just use a client side TLS certificate to authenticate instead of or in addition to the use

> With public key crypto you can implement a challenge response. Or just use a client side TLS certificate to authenticate instead of or in addition to the username and password.