3 ms·
Because obviously there's no middle ground between 0 and 20min… If your user need to wait for 1s, then it will probably not affect traffic top much (especially
by littlestymaar 3y ago
Because obviously there's no middle ground between 0 and 20min…
If your user need to wait for 1s, then it will probably not affect traffic top much (especially if you do it concurrently to loading your bloated webpage that already take a few seconds to load), but you've effectively lowered your spammer's throughput to 1qps (if you're using a memory-hard PoW scheme using Argon-2 or equivalent, the attacker cannot really speed things up by using a beeffier machine, by design of the cryptographic protocol)
- xigoi 3y agoSomething that takes less than 20 minutes on grandma's old laptop will take less than a second on a powerful server.
- littlestymaar 3y agoNot with memory-hard schemes, that's the point of it actually! And that's because you don't have a 1200x increase in memory latency between your grandma's laptop and a server, you barely have an order of magnitude in the most extreme scenario.