4 ms·
The problem is that with Tor the IP isn't much use as an identifier to establish reputation. As CloudFlare say in their post, they do use reputation of the exit
by ascorbic 11y ago
The problem is that with Tor the IP isn't much use as an identifier to establish reputation. As CloudFlare say in their post, they do use reputation of the exit node IPs to some extent, but the trouble is that there's so much abuse from Tor, most exit nodes always have bad rep. The zero knowledge tokens t hat they talk about are a way of establishing reputation without losing anonymity.
- grey-area 11y agoWhat they do at present appears to be to assign long term reputation to tor nodes, but if instead they assigned reputation over a few minutes and reset it soon after, wouldn't that work better and avoid being overly broad? More load for them obviously but could possibly be done just for tor nodes. The token scheme looks interesting though as long as it was truly anonymous and tokens were different on each request to avoid tracking. https://github.com/gtank/captcha-draft/blob/master/captcha-plugin-draft.txt https://github.com/gtank/captcha-draft/blob/master/captcha-p... i wonder if they could do a plugin for the tor browser so that they don't have to wait for tor?