Dnia 20.01.2021 o godz. 11:50:30 Stefano Bagnara via mailop pisze:
> 
> How do you deal with this issue?

I'm not an ESP and actually don't face this issue, but some time ago I
created my own version of CAPTCHA that I use in registration form on my
server.

There is no CAPTCHA on the form per se, but when you fill in the form, you
get two things:
1) a number that is displayed *only in the web browser* after filling in the
form. The user is instructed to remember (or write down) that number.
2) a regular confirmation link, that comes via email. That email (or link)
does not contain the number from point 1).

When the user clicks on the confirmation link, he/she is additionally asked
to enter the number that was shown to him/her after filling up the form.
Only then the registration succeeds.

You may consider it some form of "two factor authentication" while
registering :).

I'm not sure about what actual level of protection it provides. What do you
think?
-- 
Regards,
   Jaroslaw Rafa
   r...@rafa.eu.org
--
"In a million years, when kids go to school, they're gonna know: once there
was a Hushpuppy, and she lived with her daddy in the Bathtub."
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Reply via email to