https://freemindtronic.com/zero-knowledge-downgrade-attacks-password-managers/