4 ms·
> What about the case of someone signing up for thousands of accounts? My question is related to the specific /login page, not the registration page. I unders
by cookiengineer 5y ago
> What about the case of someone signing up for thousands of accounts?
My question is related to the specific /login page, not the registration page.
I understand the benefit for blocking spammer signups, but not for the current case of the login page where users have an account already, were verified that the account/password was correct (captcha appears in second step), and then have to enter a second decryption password manually.
In that scenario there's no argument on the "WHY" a captcha helps. It simply doesn't.
- drivebycomment 5y agoIt increases the cost of credential stuffing attack, which is very common nowadays.