this post was submitted on 23 Jun 2023
131 points (100.0% liked)
sh.itjust.works Main Community
7649 readers
14 users here now
Home of the sh.itjust.works instance.
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I believe another captcha implementation will be included in 18.1
might turn off registration until then. bots can answer emails.
But they often don't. I'm still in favor of adding captcha, but the bots we're seeing are choosing instances without email requirement because it's easier (and sending an email every millisecond is a good way for the instance to be banned by whatever mail provider it's going to, making it so that you can't complete account creation)
i've also been a fan of low bar initial logins then ramping the user into higher forms of auth as they engage with a platform more.