zxun
I think it is a good alternative to let each client generate their own SHA512 for their password.
As a client signs in, the server checks if a certain directory has that certificate or not, then compute the SHA512 of the password, and compare with that certificate. It could be much easier than conventional X509 system.