lesson 3:
Sign Smart
A signature proves control of the key when it was made. It doesn't prove who ya are, and it can be shown again later. That's why a good challenge has a fresh nonce or date in it.
Only sign exact text ya agree with. If a message is vague ("I agree", "transfer"), don't sign it. Copy the challenge exactly, spaces and all, or the check fails.
Safety: Never share yer private keys, seed phrase or wallet file with anybody. GLiBz never asks fer 'em, and neither does the QuarterMaster.