What is the correct procedure in sending an authenticated message, I've been researching and have been getting different answers, such as hash-then-sign ,  , sign-then-encrypt  (but the link wasn't specific for RSA).
- Do I send the hash-then-sign (with something like RSA-PSS PKCS#1) and attach it to the message or encrypted message?
- Do I use sign-then-encrypt, I tried searching "sign then encrypt rsa", with no result on the scheme used, what cryptographic scheme would I use? Would I just use RSA-sign and RSA-encrypt?
- Do I combine them and use hash-then-sign-then-encrypt and just send it as one, is there a cryptographic scheme for this?