3 ms·
Given that these tokens are intentionally designed to distinguish human from bot traffic, I'd be surprised if they were (easily) available to archival tooling.
by lxgr 1y ago
Given that these tokens are intentionally designed to distinguish human from bot traffic, I'd be surprised if they were (easily) available to archival tooling.
- charcircuit 1y agoThe URLSession API supports private access tokens (it's handled for you automatically) while your app is foregrounded. https://developer.apple.com/documentation/foundation/urlsession https://developer.apple.com/documentation/foundation/urlsess...
- lxgr 1y agoOh, interesting! But I'd still expect these to be heavily rate limited etc. – otherwise, the people captcha-protected sites are hoping to keep out could just use these, right?
- charcircuit 1y agoAt what rate are archivers solving Cloudflare challenges though? Probably not enough to hit any kind of rate limit. This is only used for the initial challenge and not for every request.