3 ms·
This is a really intriguing idea. What would stop a spammer from taking the time to get a single token and sharing it among a pool of bots?
by turbocon 4y ago
This is a really intriguing idea. What would stop a spammer from taking the time to get a single token and sharing it among a pool of bots?
- realaravinth 4y agoGlad you ask! There are protections against replay attacks within mCaptcha: tokens are single use also have a lifetime beyond which they are invalid. Disclosure: author of mCaptcha