Alternative to google recaptcha
Closed this issue · 4 comments
We need an alternative to google recaptcha for the sake of our user's privacy and not to mention some of users would be shut out by even using google recaptcha per the country they are in.
We only use this on the slack invite endpoint right now. Simple recaptcha's can be circumvented by bots quite easy unfortunately, but we want to restrict the slack invite form submission to humans.
Suggestions are welcome.
There are not many alternatives but probably worth to read https://kevv.net/you-probably-dont-need-recaptcha/, maybe a math question could be a good solution or even other kind of funny challenge
@codeadict this is true, might not be worth it. I was thinking about bandwidth costs. That is the more bots hitting that end point and submitting bogus addresses (or valid addresses for bad actors) it will run up the bill.
But I could very much be over thinking that. The endpoint is rate limited after all.
@codeadict you're right... and my logic on saving bandwidth is folly, going to remove the recaptcha 😁
Yeah Rate limits will prevent lots of bot request, worst case you can identify bots and ban them with firewall rules, blacklist or something else