Ask HN：你使用 PoW 验证码对抗表单垃圾邮件的经验是什么？
1 分•作者: pentacent_hq•4 个月前
大家好，
我正在开发一个开源的电子邮件通讯工具，我们面临的挑战之一是表单垃圾邮件：一旦注册表单上线，机器人就会尝试注册。这可能是为了淹没账户被盗用户的收件箱。但这对运营通讯的人来说也很糟糕，因为这些最终不受欢迎的邮件会降低他们的发件人声誉。
最近在 Hacker News 上有一个关于这个话题的讨论 [1]。帖子作者最终使用了 Cloudflare Turnstile 来缓解这个问题。我们目前已经支持外部验证码解决方案，如 hCaptcha。然而，我们的许多用户都非常注重隐私，不喜欢将用户数据发送给第三方（特别是对于我们的欧洲用户来说，是欧盟以外的第三方）。
所以，我现在一直在考虑为所有注册表单添加一个隐形的 Proof-of-Work (PoW) 验证码。我正在考虑的可能实现方案是 Altcha [2] 和 mCaptcha [3]。
现在我想问一个问题：你们有人尝试使用 PoW 验证码来防止表单垃圾邮件吗？到目前为止，你们的体验如何？
[1] https://news.ycombinator.com/item?id=47609882
[2] https://altcha.org/
[3] https://mcaptcha.org/
查看原文
Hey folks,<p>I'm building an Open Source email newsletter tool and one of the challenges we have is form spam: As soon as a signup form goes live somewhere, bots will try to sign up. This is possibly an attempt to overwhelm the inbox of people whose accounts have been compromised. But it's also bad for the people who run the newsletter as these ultimately unwanted emails reduce their sender reputation.<p>There was recently a discussion here on HN about this topic [1]. The post author ended up using Cloudflare Turnstile to mitigate the issue. We currently already have support for external captcha solutions like hCaptcha. However, many of our users are quite privacy-conscious and don't like having user data sent to third parties (especially non-EU third parties for our European users).<p>So now I've been thinking of adding an invisible proof-of-work (PoW) captcha to all signup forms. Possible implementations I've been considering are Altcha [2] and mCaptcha [3].<p>Now to my question: Have any of you tried using PoW captchas to protect against form spam? What have your experiences been with it so far?<p>[1] https://news.ycombinator.com/item?id=47609882<p>[2] https://altcha.org/<p>[3] https://mcaptcha.org/