4 ms·
This is in line with my experience as well. For most sites, CAPTCHAs are overkill and an accessibility problem. Hidden honeypot, maybe a simple “How much is 5 +
by V__ 3y ago
This is in line with my experience as well. For most sites, CAPTCHAs are overkill and an accessibility problem. Hidden honeypot, maybe a simple “How much is 5 + 2” keeps 99% of spam out. I had a few more difficult cases, which were solved by blocking some geographic IP regions and adding blacklists for certain words, like “crypto” for example.
- revicon 3y agoRemember that Google reCAPTCHA v3 is invisible to the user. No accessibility issues.
- Nullabillity 3y agoIt's invisible until it isn't.
- revicon 3y agoHows that?
- frodowtf 3y agoI'm not an expert on honeypot inputs but wouldn't it be super easy to check for type=hidden or opacity=0 if you'd like to spam?
- V__ 3y agoYes, but most bots don't. There are also some more elaborate methods. Giving the input a tabindex="-1", aria-hidden="true" and then moving it left: -100vh works pretty well.